wikimedia/mediawiki-extensions-SecureLinkFixer
1
0
Fork 0
mirror of https://gerrit.wikimedia.org/r/mediawiki/extensions/SecureLinkFixer synced 2024-11-24 15:43:39 +00:00
Code Issues Packages Projects Releases Wiki Activity
Mirror of https://gerrit.wikimedia.org/g/mediawiki/extensions/SecureLinkFixer
27 commits 270 branches 0 tags 64 MiB
PHP 97.2%
JavaScript 2.8%
Go to file
libraryupgrader 026d92ecad build: Updating dependencies 
composer:
* mediawiki/mediawiki-codesniffer: 24.0.0 → 26.0.0

npm:
* lodash: 4.17.11 → 4.17.14
  * https://npmjs.com/advisories/1065
  * CVE-2019-10744

Change-Id: Ib2401c3f012cf1dea6a3f9c14f0dc837afe77c11
2019-07-15 23:59:33 +00:00
i18n Localisation updates from https://translatewiki.net. 2019-01-13 22:13:42 +01:00
includes Fix weird spacing 2018-08-01 21:40:16 -07:00
maintenance Merge "Use StaticArrayWriter class" 2018-08-18 06:25:12 +00:00
tests Add tests for Hooks 2018-08-05 00:22:52 -06:00
.eslintrc.json Add missing .eslintrc.json to pass npm 2019-02-23 14:46:51 +01:00
.gitignore Initial commit 2018-07-29 19:01:06 -07:00
.gitreview Add .gitreview 2018-07-28 01:34:16 +02:00
.phpcs.xml build: Updating mediawiki/mediawiki-codesniffer to 22.0.0 2018-09-03 18:18:39 +00:00
CODE_OF_CONDUCT.md build: Updating mediawiki/mediawiki-codesniffer to 22.0.0 2018-09-03 18:18:39 +00:00
composer.json build: Updating dependencies 2019-07-15 23:59:33 +00:00
COPYING Initial commit 2018-07-29 19:01:06 -07:00
domains.php Update domains.php to mozilla-central@fd75f8567ce9 2018-09-03 15:20:22 -07:00
extension.json Initial commit 2018-07-29 19:01:06 -07:00
Gruntfile.js Initial commit 2018-07-29 19:01:06 -07:00
package-lock.json build: Updating dependencies 2019-07-15 23:59:33 +00:00
package.json build: Updating npm dependencies for security issues 2019-06-08 21:16:24 +00:00
README Initial commit 2018-07-29 19:01:06 -07:00

README 

SecureLinkFixer

This MediaWiki extension rewrites external links to use the HTTPS protocol
if they are on the HSTS preload list.

While users with modern browsers will automatically use HTTPS, outdated
browsers or non-browser clients will first try visiting HTTP before being
redirected to HTTPS.

This extension is licensed under the GPL v3, or any later version. The HSTS
list included with this extension (domains.php) is licensed under the
Mozilla Public License, v 2.0.

Further reading/motivations:
* https://twitter.com/ajhdock/status/970669975861153792
* https://www.facebook.com/notes/protect-the-graph/upgrades-to-facebooks-link-security/2015650322008442/