How to require an HTTPS connection (HTML)

Applies to Windows and Windows Phone

With the "ms-https-connections-only" meta element value you can prevent your app from using HTTP connections for navigation or other non-media web content retrievals. When you set this meta element's content attribute to "true", HTTP navigation and non-media web content retrievals will fail.

This meta tag must exist in the head of the your app's home page and must exist at the time that the document fires its load event. This is the only time you can turn on this feature and after you set it, it remains in effect until the next time the app is started. This means that iframe elements in your start page that point to HTTP URIs may load if the iframe exists and begins to load before the document finishes loading.

Prerequisites

Instructions

Step 1: Use an HTTPS connection

Add a meta element to the head of your home page. Set its name to "ms-https-connections-only" and its content attribute to "true".


!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
    <title>HTTPS connections example</title>

    <!-- Only use HTTPS connections. -->
    <meta name="ms-https-connections-only" content="true"/>

    <!-- WinJS references -->

    <!-- Your other script and style references. -->
</head>
<body>
      
    <!-- Your content. --> 
 
</body>
</html>

Related topics

Other resources
Connecting to web services

 

 

Show:
© 2014 Microsoft