All fixes

Redirect HTTP traffic to HTTPS

redirect-https

Traffic on port 80 is readable and rewritable by anyone on the path. Send a 301 to the HTTPS version of every URL before anything else runs.

Cloudflare

  1. 1 Go to SSL/TLS > Edge Certificates
  2. 2 Enable 'Always Use HTTPS'
Cloudflare docs

Does your app still have this?

Scan your domain