When the local wiki is accessed in HTTP, clicking an external link starting with // will (if this is the first visit) do an unencrypted HTTP call to the target server before being redirected to the HTTPS version, potentially allowing a man in the middle attack. This commit changes the URI scheme to https: for every link with HSTS enabled in the codebase, namely www.mediawiki.org, *.wikimedia.org, *.wikipedia.org, translatewiki.net and bugs.php.net. Change-Id: I002b502952f32fb49823e18b281252977ecca8cf
5 lines
605 B
JSON
5 lines
605 B
JSON
{
|
|
"@metadata": [],
|
|
"mainpagetext": "'''Nstallazzioni di MediaWiki cumplitata currettamenti.'''",
|
|
"mainpagedocfooter": "Pi favuri taliari [https://meta.wikimedia.org/wiki/Help:Contents Guida utenti] pi aiutu supra l'usu e la cunfigurazzioni di stu software wiki.\n\n== P'accuminzari ==\n* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Configuration_settings Alencu di mpustazzioni di cunfigurazzioni]\n* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:FAQ MediaWiki FAQ]\n* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce Mailing list dî rilassi di MediaWiki]"
|
|
}
|