# BEGIN WordPress 

RewriteEngine On 

RewriteRule .* - [E=HTTP_AUTHORIZAaTION:%{HTTP:Authorization}] 

RewriteBase / 

RewriteRule ^index\.php$ - [L] 

RewriteCond %{REQUEST_FILENAME} !-f 

RewriteCond %{REQUEST_FILENAME} !-d 

RewriteRule . /index.php [L] 

# END WordPress 

RewriteEngine On 

RewriteCond %{HTTPS} !=on 

RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301,NE] 

Header always set Content-Security-Policy "upgrade-insecure-requests;"