mirror of
https://gerrit.wikimedia.org/r/mediawiki/extensions/SecureLinkFixer
synced 2024-09-23 10:25:36 +00:00
b14450fe3a
The plugin checks and flags potential security issues (XSS, SQLi, etc.) using static analysis. See <https://www.mediawiki.org/wiki/Phan-taint-check-plugin> for more details. Change-Id: Ibebf265e10f8fdb0c26046a81c5f6978b0230537 |
||
|---|---|---|
| .phan | ||
| i18n | ||
| includes | ||
| maintenance | ||
| tests | ||
| .eslintrc.json | ||
| .gitignore | ||
| .gitreview | ||
| .phpcs.xml | ||
| CODE_OF_CONDUCT.md | ||
| composer.json | ||
| COPYING | ||
| domains.php | ||
| extension.json | ||
| Gruntfile.js | ||
| package-lock.json | ||
| package.json | ||
| README | ||
SecureLinkFixer This MediaWiki extension rewrites external links to use the HTTPS protocol if they are on the HSTS preload list. While users with modern browsers will automatically use HTTPS, outdated browsers or non-browser clients will first try visiting HTTP before being redirected to HTTPS. This extension is licensed under the GPL v3, or any later version. The HSTS list included with this extension (domains.php) is licensed under the Mozilla Public License, v 2.0. Further reading/motivations: * https://twitter.com/ajhdock/status/970669975861153792 * https://www.facebook.com/notes/protect-the-graph/upgrades-to-facebooks-link-security/2015650322008442/