Handbuch:$wgCSPFalsePositiveUrls

Sicherheit: $wgCSPFalsePositiveUrls
Controls what URLs to ignore in upcoming Content-Security-Policy feature's reporting.
Eingeführt in Version:	1.28.0 (Gerrit change 306765; git #d84479c4)
Entfernt in Version:	Weiterhin vorhanden
Erlaubte Werte:	(Array)
Standardwert:	Siehe unten
Andere Einstellungen: Alphabetisch | Nach Funktion

List of urls which appear often to be triggering CSP reports but do not appear to be caused by actual content, but by client software inserting scripts (i.e. Ad-Ware). List based on results from Wikimedia logs.

A value of true for a certain URL activates it as a false-positive.

The default value is based on URLs of spam that comes into the Wikimedia log files, based on testing on elwiki.

Standardwert

MediaWiki Version:

≥ 1.33

$wgCSPFalsePositiveUrls = [
	'https://3hub.co' => true,
	'https://morepro.info' => true,
	'https://p.ato.mx' => true,
	'https://s.ato.mx' => true,
	'https://adserver.adtech.de' => true,
	'https://ums.adtechus.com' => true,
	'https://cas.criteo.com' => true,
	'https://cat.nl.eu.criteo.com' => true,
	'https://atpixel.alephd.com' => true,
	'https://rtb.metrigo.com' => true,
	'https://d5p.de17a.com' => true,
	'https://ad.lkqd.net/vpaid/vpaid.js' => true, // 1.29+
	'https://ad.lkqd.net/vpaid/vpaid.js?fusion=1.0' => true, // 1.33+
	'https://t.lkqd.net/t' => true, // 1.33+
	'chrome-extension' => true, // 1.33+
];

MediaWiki Versions:

1.29 – 1.32

$wgCSPFalsePositiveUrls = [
	'https://3hub.co' => true,
	'https://morepro.info' => true,
	'https://p.ato.mx' => true,
	'https://s.ato.mx' => true,
	'https://adserver.adtech.de' => true,
	'https://ums.adtechus.com' => true,
	'https://cas.criteo.com' => true,
	'https://cat.nl.eu.criteo.com' => true,
	'https://atpixel.alephd.com' => true,
	'https://rtb.metrigo.com' => true,
	'https://d5p.de17a.com' => true,
	'https://ad.lkqd.net/vpaid/vpaid.js' => true, // 1.29+
];

MediaWiki Version:

1.28

$wgCSPFalsePositiveUrls = [
	'https://3hub.co' => true,
	'https://morepro.info' => true,
	'https://p.ato.mx' => true,
	'https://s.ato.mx' => true,
	'https://adserver.adtech.de' => true,
	'https://ums.adtechus.com' => true,
	'https://cas.criteo.com' => true,
	'https://cat.nl.eu.criteo.com' => true,
	'https://atpixel.alephd.com' => true,
	'https://rtb.metrigo.com' => true,
	'https://d5p.de17a.com' => true,
];