Go to file
Kunal Mehta 0509d34225 Switch to new hook handler format
* Turn HSTSPreloadLookup into a real service, per @todo
* Convert Hooks into a non-static class, take lookup as an argument
* Update tests for new calling style

== Test plan ==
* CI/tests pass
* Use Special:ExpandTemplates with a preloaded domain and localhost,
  observe preloaded link changes, localhost stays http

Bug: T271027
Change-Id: I0196350e85c09eedfba4dbf1dab81f9a757b2a12
2022-06-05 12:12:39 -04:00
.phan Enable phan 2019-07-18 19:33:07 -04:00
i18n Localisation updates from https://translatewiki.net. 2022-01-17 08:12:56 +01:00
includes Switch to new hook handler format 2022-06-05 12:12:39 -04:00
maintenance Switch to new hook handler format 2022-06-05 12:12:39 -04:00
tests Switch to new hook handler format 2022-06-05 12:12:39 -04:00
.eslintrc.json build: Updating mediawiki/mediawiki-codesniffer to 33.0.0 2020-11-04 10:10:31 +00:00
.gitignore build: Updating grunt-banana-checker to 0.8.1 2019-12-14 23:07:20 +00:00
.gitreview Add .gitreview 2018-07-28 01:34:16 +02:00
.phpcs.xml build: Updating ansi-regex to 5.0.1 2021-10-08 07:00:15 +00:00
CODE_OF_CONDUCT.md build: Updating mediawiki/mediawiki-codesniffer to 22.0.0 2018-09-03 18:18:39 +00:00
composer.json build: Updating dependencies 2022-05-21 11:54:59 +00:00
COPYING Initial commit 2018-07-29 19:01:06 -07:00
domains.php Updating domains.php from Mozilla 2022-05-07 21:25:26 +01:00
extension.json Switch to new hook handler format 2022-06-05 12:12:39 -04:00
Gruntfile.js build: Use existing eslint also for json linting 2020-09-11 23:48:00 +02:00
package-lock.json build: Updating grunt to 1.5.3 2022-05-27 00:40:12 +00:00
package.json build: Updating grunt to 1.5.3 2022-05-27 00:40:12 +00:00
README Initial commit 2018-07-29 19:01:06 -07:00

SecureLinkFixer

This MediaWiki extension rewrites external links to use the HTTPS protocol
if they are on the HSTS preload list.

While users with modern browsers will automatically use HTTPS, outdated
browsers or non-browser clients will first try visiting HTTP before being
redirected to HTTPS.

This extension is licensed under the GPL v3, or any later version. The HSTS
list included with this extension (domains.php) is licensed under the
Mozilla Public License, v 2.0.

Further reading/motivations:
* https://twitter.com/ajhdock/status/970669975861153792
* https://www.facebook.com/notes/protect-the-graph/upgrades-to-facebooks-link-security/2015650322008442/