Disable Upgrade-Insecure-Requests in Firefox and Chrome : <p>I run a PHP+Apache2 application locally - for development purposes.</p>

<p>The app is running at <a href="http://x.dev" rel="noreferrer">http://x.dev</a> (a virtual host + an entry in hosts file)</p>

<p>After Firefox updated it seems that I can no longer access <a href="http://x.dev" rel="noreferrer">http://x.dev</a> as the address in address bar is changed, by the browser, in <a href="https://x.dev" rel="noreferrer">https://x.dev</a> which obviously is not configured.</p>

<p>I used older version of Firefox (49) vs the new one (59.0.2) and the difference seems to be a new header "Upgrade-Insecure-Requests" that was added to the request.</p>

<p>This seems to force http to https, thus causing an issue.</p>

<p>Bellow is what I got after I try to access <a href="http://x.dev" rel="noreferrer">http://x.dev</a> :</p>

<p><a href="https://i.stack.imgur.com/4tvwO.jpg" rel="noreferrer"><img src="https://i.stack.imgur.com/4tvwO.jpg" alt="enter image description here"></a></p>

<p>I saw the same behavior in Chrome. Edge seems to not be "plagued" by this one.</p>

<p>AFAIK this new header was added to improve security (I'm fine with that), but is there any method (configure Firefox) to get back to old behavior (not sending this value)? Or any change on server side to ignore that request?</p>
