wikimedia/mediawiki-extensions-SecureLinkFixer
1
0
Fork 0
mirror of https://gerrit.wikimedia.org/r/mediawiki/extensions/SecureLinkFixer synced 2024-11-24 15:43:39 +00:00
Code Issues Packages Projects Releases Wiki Activity
Mirror of https://gerrit.wikimedia.org/g/mediawiki/extensions/SecureLinkFixer
85 commits 270 branches 0 tags 64 MiB
PHP 97.2%
JavaScript 2.8%
Go to file
libraryupgrader bcabe39908 build: Updating acorn to 7.1.1 
* https://npmjs.com/advisories/1488

Change-Id: I985275afce2ad006f10d219fac60e374a1f90c1c
2020-03-08 12:30:55 +00:00
.phan Enable phan 2019-07-18 19:33:07 -04:00
i18n Localisation updates from https://translatewiki.net. 2019-12-26 16:21:39 +01:00
includes Move the logic from fetchList.php into a PHP class for easier reuse 2019-12-28 17:33:07 -08:00
maintenance Move the logic from fetchList.php into a PHP class for easier reuse 2019-12-28 17:33:07 -08:00
tests Add a test verifying the reproducibility of domains.php 2019-12-28 17:33:07 -08:00
.eslintrc.json build: Remove unneeded exclude from .eslintrc.json 2020-01-08 19:30:14 +00:00
.gitignore build: Updating grunt-banana-checker to 0.8.1 2019-12-14 23:07:20 +00:00
.gitreview Add .gitreview 2018-07-28 01:34:16 +02:00
.phpcs.xml build: Updating mediawiki/mediawiki-codesniffer to 22.0.0 2018-09-03 18:18:39 +00:00
CODE_OF_CONDUCT.md build: Updating mediawiki/mediawiki-codesniffer to 22.0.0 2018-09-03 18:18:39 +00:00
composer.json build: Updating composer dependencies 2020-01-30 04:05:55 +00:00
COPYING Initial commit 2018-07-29 19:01:06 -07:00
domains.php Updating domains.php from Mozilla 2020-03-01 00:02:04 +00:00
extension.json Initial commit 2018-07-29 19:01:06 -07:00
Gruntfile.js build: Updating npm dependencies 2020-01-08 05:33:21 +00:00
package-lock.json build: Updating acorn to 7.1.1 2020-03-08 12:30:55 +00:00
package.json build: Updating npm dependencies 2020-01-08 05:33:21 +00:00
README Initial commit 2018-07-29 19:01:06 -07:00

README 

SecureLinkFixer

This MediaWiki extension rewrites external links to use the HTTPS protocol
if they are on the HSTS preload list.

While users with modern browsers will automatically use HTTPS, outdated
browsers or non-browser clients will first try visiting HTTP before being
redirected to HTTPS.

This extension is licensed under the GPL v3, or any later version. The HSTS
list included with this extension (domains.php) is licensed under the
Mozilla Public License, v 2.0.

Further reading/motivations:
* https://twitter.com/ajhdock/status/970669975861153792
* https://www.facebook.com/notes/protect-the-graph/upgrades-to-facebooks-link-security/2015650322008442/