aboutsummaryrefslogtreecommitdiffstats
path: root/includes/ContentSecurityPolicy.php
diff options
context:
space:
mode:
Diffstat (limited to 'includes/ContentSecurityPolicy.php')
-rw-r--r--includes/ContentSecurityPolicy.php6
1 files changed, 3 insertions, 3 deletions
diff --git a/includes/ContentSecurityPolicy.php b/includes/ContentSecurityPolicy.php
index d3d033379981..70438d9db0ee 100644
--- a/includes/ContentSecurityPolicy.php
+++ b/includes/ContentSecurityPolicy.php
@@ -559,7 +559,7 @@ class ContentSecurityPolicy {
*
* @since 1.35
* @param string $source Source to add.
- * e.g. blob:, example.com, https://*.example.com, example.com/foo
+ * e.g. blob:, *.example.com, %https://example.com, example.com/foo
*/
public function addDefaultSrc( $source ) {
$this->extraDefaultSrc[] = $this->prepareUrlForCSP( $source );
@@ -573,7 +573,7 @@ class ContentSecurityPolicy {
*
* @since 1.35
* @param string $source Source to add.
- * e.g. blob:, example.com, https://*.example.com, example.com/foo
+ * e.g. blob:, *.example.com, %https://example.com, example.com/foo
*/
public function addStyleSrc( $source ) {
$this->extraStyleSrc[] = $this->prepareUrlForCSP( $source );
@@ -588,7 +588,7 @@ class ContentSecurityPolicy {
* @since 1.35
* @warning Be careful including external scripts, as they can take over accounts.
* @param string $source Source to add.
- * e.g. blob:, example.com, https://*.example.com, example.com/foo
+ * e.g. blob:, *.example.com, %https://example.com, example.com/foo
*/
public function addScriptSrc( $source ) {
$this->extraScriptSrc[] = $this->prepareUrlForCSP( $source );