Manual:$wgCSPFalsePositiveUrls/tr

From Linux Web Expert

Revision as of 06:57, 21 February 2021 by imported>FuzzyBot (Updating to match new version of source page)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

<translate> Security</translate>: $wgCSPFalsePositiveUrls
Controls what URLs to ignore in upcoming Content-Security-Policy feature's reporting.
<translate> Introduced in version:</translate>1.28.0 (Gerrit change 306765; git #d84479c4)
<translate> Removed in version:</translate><translate> still in use</translate>
<translate> Allowed values:</translate>(dizi)
<translate> Default value:</translate>See below

List of urls which appear often to be triggering CSP reports but do not appear to be caused by actual content, but by client software inserting scripts (i.e. Ad-Ware). List based on results from Wikimedia logs.

A value of true for a certain URL activates it as a false-positive.

The default value is based on URLs of spam that comes into the Wikimedia log files, based on testing on elwiki.

Default value

<td class="mw-version-versionbox" title="<translate nowrap> The latest stable version is <tvar name=1>1.41</tvar></translate>">
<translate> ≥</translate> 1.33
<translate> MediaWiki version:</translate>
$wgCSPFalsePositiveUrls = [
	'https://3hub.co' => true,
	'https://morepro.info' => true,
	'https://p.ato.mx' => true,
	'https://s.ato.mx' => true,
	'https://adserver.adtech.de' => true,
	'https://ums.adtechus.com' => true,
	'https://cas.criteo.com' => true,
	'https://cat.nl.eu.criteo.com' => true,
	'https://atpixel.alephd.com' => true,
	'https://rtb.metrigo.com' => true,
	'https://d5p.de17a.com' => true,
	'https://ad.lkqd.net/vpaid/vpaid.js' => true, // 1.29+
	'https://ad.lkqd.net/vpaid/vpaid.js?fusion=1.0' => true, // 1.33+
	'https://t.lkqd.net/t' => true, // 1.33+
	'chrome-extension' => true, // 1.33+
];
<td class="mw-version-versionbox" title="<translate nowrap> MediaWiki <tvar name=1>1.32</tvar> is unsupported version</translate>">
1.29 – 1.32
<translate> MediaWiki versions:</translate>
$wgCSPFalsePositiveUrls = [
	'https://3hub.co' => true,
	'https://morepro.info' => true,
	'https://p.ato.mx' => true,
	'https://s.ato.mx' => true,
	'https://adserver.adtech.de' => true,
	'https://ums.adtechus.com' => true,
	'https://cas.criteo.com' => true,
	'https://cat.nl.eu.criteo.com' => true,
	'https://atpixel.alephd.com' => true,
	'https://rtb.metrigo.com' => true,
	'https://d5p.de17a.com' => true,
	'https://ad.lkqd.net/vpaid/vpaid.js' => true, // 1.29+
];
<td class="mw-version-versionbox" title="<translate nowrap> MediaWiki <tvar name=1>1.28</tvar> is unsupported version</translate>">
1.28
<translate> MediaWiki version:</translate>
$wgCSPFalsePositiveUrls = [
	'https://3hub.co' => true,
	'https://morepro.info' => true,
	'https://p.ato.mx' => true,
	'https://s.ato.mx' => true,
	'https://adserver.adtech.de' => true,
	'https://ums.adtechus.com' => true,
	'https://cas.criteo.com' => true,
	'https://cat.nl.eu.criteo.com' => true,
	'https://atpixel.alephd.com' => true,
	'https://rtb.metrigo.com' => true,
	'https://d5p.de17a.com' => true,
];