wikimedia/mediawiki-extensions-SecureLinkFixer
1
0
Fork 0
mirror of https://gerrit.wikimedia.org/r/mediawiki/extensions/SecureLinkFixer synced 2024-11-28 01:09:58 +00:00
Code Issues Packages Projects Releases Wiki Activity
Mirror of https://gerrit.wikimedia.org/g/mediawiki/extensions/SecureLinkFixer
105 commits 11 branches 7 tags 64 MiB
PHP 97.2%
JavaScript 2.8%
Go to file
libraryupgrader b5cc093cfd build: Updating lodash to 4.17.19 
* https://npmjs.com/advisories/1523
* CVE-2019-10744

Change-Id: I9d80ddaa64fffbb83230c59bf85c899105eb3d69
2020-07-11 02:59:20 +00:00
.phan Enable phan 2019-07-18 19:33:07 -04:00
i18n Localisation updates from https://translatewiki.net. 2019-12-26 16:21:39 +01:00
includes Move the logic from fetchList.php into a PHP class for easier reuse 2019-12-28 17:33:07 -08:00
maintenance Move the logic from fetchList.php into a PHP class for easier reuse 2019-12-28 17:33:07 -08:00
tests Update to parserTests v2 (tidy by default) 2020-04-02 14:07:01 -04:00
.eslintrc.json build: Remove unneeded exclude from .eslintrc.json 2020-01-08 19:30:14 +00:00
.gitignore build: Updating grunt-banana-checker to 0.8.1 2019-12-14 23:07:20 +00:00
.gitreview Add .gitreview 2018-07-28 01:34:16 +02:00
.phpcs.xml build: Updating mediawiki/mediawiki-codesniffer to 22.0.0 2018-09-03 18:18:39 +00:00
CODE_OF_CONDUCT.md build: Updating mediawiki/mediawiki-codesniffer to 22.0.0 2018-09-03 18:18:39 +00:00
composer.json build: Updating mediawiki/minus-x to 1.1.0 2020-06-09 22:33:27 +00:00
COPYING Initial commit 2018-07-29 19:01:06 -07:00
domains.php Updating domains.php from Mozilla 2020-07-05 00:00:55 +00:00
extension.json Initial commit 2018-07-29 19:01:06 -07:00
Gruntfile.js build: Updating npm dependencies 2020-01-08 05:33:21 +00:00
package-lock.json build: Updating lodash to 4.17.19 2020-07-11 02:59:20 +00:00
package.json build: Updating dependencies 2020-04-22 19:11:49 +00:00
README Initial commit 2018-07-29 19:01:06 -07:00

README 

SecureLinkFixer

This MediaWiki extension rewrites external links to use the HTTPS protocol
if they are on the HSTS preload list.

While users with modern browsers will automatically use HTTPS, outdated
browsers or non-browser clients will first try visiting HTTP before being
redirected to HTTPS.

This extension is licensed under the GPL v3, or any later version. The HSTS
list included with this extension (domains.php) is licensed under the
Mozilla Public License, v 2.0.

Further reading/motivations:
* https://twitter.com/ajhdock/status/970669975861153792
* https://www.facebook.com/notes/protect-the-graph/upgrades-to-facebooks-link-security/2015650322008442/