diff --git a/scm-webapp/src/main/java/sonia/scm/filter/SecurityHeadersFilter.java b/scm-webapp/src/main/java/sonia/scm/filter/SecurityHeadersFilter.java
index 75d41cc82e..ba348b67f6 100644
--- a/scm-webapp/src/main/java/sonia/scm/filter/SecurityHeadersFilter.java
+++ b/scm-webapp/src/main/java/sonia/scm/filter/SecurityHeadersFilter.java
@@ -44,7 +44,6 @@ public class SecurityHeadersFilter extends HttpFilter {
         "form-action 'self'; " +
         "object-src 'none'; " +
         "frame-ancestors 'none'; " +
-        "upgrade-insecure-requests; " +
         "block-all-mixed-content"
     );
     response.setHeader("Permissions-Policy",