wikimedia/mediawiki-extensions-SecureLinkFixer
1
0
Fork 0
mirror of https://gerrit.wikimedia.org/r/mediawiki/extensions/SecureLinkFixer synced 2024-09-23 10:25:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
Mirror of https://gerrit.wikimedia.org/g/mediawiki/extensions/SecureLinkFixer
26 commits 260 branches 0 tags 54 MiB
PHP 97.2%
JavaScript 2.8%
Go to file
libraryupgrader 50aa42862d build: Updating npm dependencies for security issues 
* Updated grunt to 1.0.4, addressing:
  * https://npmjs.com/advisories/788
  * https://npmjs.com/advisories/813

Committed package-lock.json (T179229) too.

Change-Id: I92e0bdaa2e32d15fd8b443cb43c321c871acf1b2
2019-06-08 21:16:24 +00:00
i18n Localisation updates from https://translatewiki.net. 2019-01-13 22:13:42 +01:00
includes Fix weird spacing 2018-08-01 21:40:16 -07:00
maintenance Merge "Use StaticArrayWriter class" 2018-08-18 06:25:12 +00:00
tests Add tests for Hooks 2018-08-05 00:22:52 -06:00
.eslintrc.json Add missing .eslintrc.json to pass npm 2019-02-23 14:46:51 +01:00
.gitignore Initial commit 2018-07-29 19:01:06 -07:00
.gitreview Add .gitreview 2018-07-28 01:34:16 +02:00
.phpcs.xml build: Updating mediawiki/mediawiki-codesniffer to 22.0.0 2018-09-03 18:18:39 +00:00
CODE_OF_CONDUCT.md build: Updating mediawiki/mediawiki-codesniffer to 22.0.0 2018-09-03 18:18:39 +00:00
composer.json build: Updating mediawiki/mediawiki-codesniffer to 24.0.0 2019-02-23 13:48:23 +00:00
COPYING Initial commit 2018-07-29 19:01:06 -07:00
domains.php Update domains.php to mozilla-central@fd75f8567ce9 2018-09-03 15:20:22 -07:00
extension.json Initial commit 2018-07-29 19:01:06 -07:00
Gruntfile.js Initial commit 2018-07-29 19:01:06 -07:00
package-lock.json build: Updating npm dependencies for security issues 2019-06-08 21:16:24 +00:00
package.json build: Updating npm dependencies for security issues 2019-06-08 21:16:24 +00:00
README Initial commit 2018-07-29 19:01:06 -07:00

README 

SecureLinkFixer

This MediaWiki extension rewrites external links to use the HTTPS protocol
if they are on the HSTS preload list.

While users with modern browsers will automatically use HTTPS, outdated
browsers or non-browser clients will first try visiting HTTP before being
redirected to HTTPS.

This extension is licensed under the GPL v3, or any later version. The HSTS
list included with this extension (domains.php) is licensed under the
Mozilla Public License, v 2.0.

Further reading/motivations:
* https://twitter.com/ajhdock/status/970669975861153792
* https://www.facebook.com/notes/protect-the-graph/upgrades-to-facebooks-link-security/2015650322008442/