Don't upgrade insecure requests when the page is served over HTTP · Issue #348 · github/secure_headers
I want to set upgrade_insecure_requests only if the page is requested over HTTPS, because I don't use HTTPS when developing on localhost (i.e. when developing, I browse http://localhost, not https:...