Currently promoting settings from report-only to enforced requires manually copying all settings in the configuration form, which has the potential to introduce errors.
1) Use JavaScript to copy values across form fields, and require the user to submit the form afterwards.
2) Add a submit button that copies values on form submit.
Once enforced values are updated, the report-only settings can be cleared.
'upgrade-insecure-requests' may pose some challenges since it is not available for report-only ( #2951922: 'upgrade-insecure-requests' is ignored in Report-Only → , #2951925: 'block-all-mixed-content' is a no-op if 'upgrade-insecure-requests' is enabled → )
Active
2.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.