Index: openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl,v diff -u -r1.153.2.1 -r1.153.2.2 --- openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl 10 Mar 2019 21:34:33 -0000 1.153.2.1 +++ openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl 8 Apr 2019 13:04:15 -0000 1.153.2.2 @@ -618,9 +618,9 @@ # ns_set get accepts a default value in 3rd argument only on # NaviServer; so perform the check in two steps for AOLserver # compatibility. - set upgrade_insecure_requests_p [ns_set get [ns_conn headers] Upgrade-Insecure-Requests] - if {$upgrade_insecure_requests_p ne "" && - $upgrade_insecure_requests_p + set upgrade_insecure_requests_p [ns_set iget [ns_conn headers] Upgrade-Insecure-Requests] + if {$upgrade_insecure_requests_p ne "" + && $upgrade_insecure_requests_p && [security::https_available_p] && ![security::secure_conn_p] } {