aboutsummaryrefslogtreecommitdiffstats
path: root/includes/ContentSecurityPolicy.php
Commit message (Expand)AuthorAgeFilesLines
* Reorg: Move CSP class to Request/Amir Sarabadani2023-02-161-594/+0
* Make use of ??= in more placesDannyS7122022-12-171-4/+1
* Replace various `array` type hints with more specific `string[]`thiemowmde2022-09-271-5/+5
* Remove unused key variable from foreach loopsUmherirrender2022-09-211-4/+4
* Use MainConfigNames instead of string literals, #4Aryeh Gregor2022-04-261-2/+4
* Use name constants to access config settings.daniel2022-04-071-12/+13
* Fix typos in comments (C-D)Siddharth VP2021-12-301-1/+1
* Remove or replace usages of "sane"Reedy2021-11-221-1/+1
* Remove comments that repeat the codeDannyS7122021-06-021-11/+1
* Use some more neutral languageReedy2021-04-181-2/+2
* Use static closures where safe to useUmherirrender2021-02-111-1/+1
* Update a lot of unspecific "array" types in PHPDocsThiemo Kreuz2020-10-281-1/+1
* Hooks::run() call site migrationTim Starling2020-05-301-4/+13
* Remove unused var initialization from ContentSecurityPolicyThiemo Kreuz2020-05-141-1/+0
* Fix numerous PSR12.Properties.ConstantVisibility.NotFoundReedy2020-05-121-2/+2
* doxygen: Changed Doxygen tags causing warnings during documentation generationHolger Knust2020-04-141-3/+3
* Replace isset() in if() conditions with ?? if possibleThiemo Kreuz2020-03-231-5/+3
* Remove auto-generated and empty lines in commentsThiemo Kreuz2020-03-171-1/+0
* Use MediaWikiServices::getRepoGroupUmherirrender2020-03-141-2/+6
* include blob: as a default script-srcBrian Wolff2020-02-271-1/+1
* Add object-src 'none' to MW CSP directive (configurable)Brian Wolff2020-02-181-0/+11
* Fix more scalar types in docblocksDaimona Eaytoy2019-12-081-1/+1
* Allow extensions to modify CSP header on a per-page basisBrian Wolff2019-10-281-9/+61
* Mild refactoring of ContentSecurityPolicyBrian Wolff2019-10-281-19/+55
* Remove more HHVM hacksMax Semenik2019-10-061-5/+2
* CSP: Minor cleanup in ContentSecurityPolicy.phpDerick Alangi2019-03-201-4/+8
* resourceloader: Give module eval the ContentSecurityPolicy nonceBrian Wolff2018-08-071-66/+13
* CSP: Allow an option of disabling noncesBrian Wolff2018-07-101-6/+24
* ContentSecurityPolicy: Add trailing & to report urlsBrian Wolff2018-05-221-1/+4
* Initial support for Content Security Policy, disabled by defaultBrian Wolff2018-05-131-0/+527