Form Security
Forms that submit data over HTTP send user-entered information in plaintext — visible to anyone on the same network. These two checks identify the specific failure modes: forms on HTTP pages, and forms whose action URL points to an HTTP endpoint even on an otherwise HTTPS page.
Form On HTTP URL
Warning
A form exists on an HTTP page — any data submitted is transmitted in plaintext.
Form URL Insecure
Warning
A form's action URL points to HTTP — data is submitted to an unencrypted endpoint.
Audit form securityacross your site
The audit identifies every form at risk of submitting data over an unencrypted connection.