Form URL Insecure

What This Means

A form on this page (which may itself be served over HTTPS) has an action attribute pointing to an HTTP URL — the endpoint that receives the form submission uses http:// rather than https://.

Why It Matters for SEO

Even if the form's page is served over HTTPS, the form submission itself goes to an HTTP endpoint. The data travels unencrypted over the network to the processing server. This is a security failure specifically in the form's action configuration — the page is secure but the submission is not.

Modern browsers may warn users when a form on an HTTPS page submits to an HTTP endpoint.

What the Platform Checks

Inspects the action attribute of all <form> elements. Fires when any form's action URL uses http://.

How to Fix It

• Update the form's action attribute to use an https:// URL.
• Ensure the form processing endpoint (the server-side script or API endpoint) is available over HTTPS.
• If using relative URLs in form action: ensure the server enforces HTTPS so relative URLs resolve to HTTPS automatically.