RewriteEngine On RewriteCond %{HTTPS} off RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L] Header set content-security-Policy: upgrade-insecure-requests )XML-RPC server accepts POST requests only.