Github mirror of MediaWiki extension SecureLinkFixer - our actual code is hosted with Gerrit (please see https://www.mediawiki.org/wiki/Developer_access for contributing)
Go to file
libraryupgrader f65e8c7d91 build: Updating grunt-banana-checker to 0.13.0
Change-Id: Ia113f1be7b7c5a4ca0c56f08394f931d6166c368
2024-05-19 12:10:56 +00:00
.phan Enable phan 2019-07-18 19:33:07 -04:00
i18n Localisation updates from https://translatewiki.net. 2023-12-04 09:05:47 +01:00
includes Add return type hint to function in ServiceWiring.php 2024-01-31 21:27:30 +01:00
maintenance Switch to new hook handler format 2022-06-05 12:12:39 -04:00
tests Lazy load large domains.php file only when it's really needed 2023-06-14 22:19:40 -04:00
.eslintrc.json build: Updating mediawiki/mediawiki-codesniffer to 33.0.0 2020-11-04 10:10:31 +00:00
.gitignore build: Updating grunt-banana-checker to 0.8.1 2019-12-14 23:07:20 +00:00
.gitreview Add .gitreview 2018-07-28 01:34:16 +02:00
.phpcs.xml build: Updating ansi-regex to 5.0.1 2021-10-08 07:00:15 +00:00
CODE_OF_CONDUCT.md build: Updating mediawiki/mediawiki-codesniffer to 22.0.0 2018-09-03 18:18:39 +00:00
COPYING Initial commit 2018-07-29 19:01:06 -07:00
Gruntfile.js build: Use existing eslint also for json linting 2020-09-11 23:48:00 +02:00
README Initial commit 2018-07-29 19:01:06 -07:00
composer.json build: Updating composer dependencies 2024-05-06 02:46:31 +00:00
domains.php Updating domains.php from Mozilla 2024-05-19 00:01:14 +00:00
extension.json build: Update MediaWiki requirement to 1.42 2024-01-12 18:24:17 -05:00
package-lock.json build: Updating grunt-banana-checker to 0.13.0 2024-05-19 12:10:56 +00:00
package.json build: Updating grunt-banana-checker to 0.13.0 2024-05-19 12:10:56 +00:00

README

SecureLinkFixer

This MediaWiki extension rewrites external links to use the HTTPS protocol
if they are on the HSTS preload list.

While users with modern browsers will automatically use HTTPS, outdated
browsers or non-browser clients will first try visiting HTTP before being
redirected to HTTPS.

This extension is licensed under the GPL v3, or any later version. The HSTS
list included with this extension (domains.php) is licensed under the
Mozilla Public License, v 2.0.

Further reading/motivations:
* https://twitter.com/ajhdock/status/970669975861153792
* https://www.facebook.com/notes/protect-the-graph/upgrades-to-facebooks-link-security/2015650322008442/