Adding report-to and NEL http header as supported value

zero-24 · zero-24 · commit d9e71e21e00e · 2022-12-07T23:01:03.000+01:00
diff --git a/httpheader.php b/httpheader.php
@@ -56,6 +56,8 @@ class PlgSystemHttpHeader extends CMSPlugin
 		'feature-policy',
 		'cross-origin-opener-policy',
 		'permissions-policy',
+		'report-to',
+		'nel',
 	];
 
 	/**
diff --git a/language/de-DE/de-DE.plg_system_httpheader.ini b/language/de-DE/de-DE.plg_system_httpheader.ini
@@ -5,7 +5,7 @@ COM_PLUGINS_CSP_FIELDSET_LABEL="Content-Security-Policy (CSP)"
 COM_PLUGINS_HSTS_FIELDSET_LABEL="Strict-Transport-Security (HSTS)"
 PLG_SYSTEM_HTTPHEADER="System - HttpHeader"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER="Statische HTTP Header definieren"
-PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_DESC="Über diese Option können allen unterstützten HTTP Headern auch eigene Werte zugewiesen werden, die Werte hier überschreiben alle vorherigen Konfigurationen!. Die unterstützen HTTP Header sind: <br><ul><li>Strict-Transport-Security</li><li>Content-Security-Policy</li><li>Content-Security-Policy-Report-Only</li><li>X-Frame-Options</li><li>X-XSS-Protection</li><li>X-Content-Type-Options</li><li>Referrer-Policy</li><li>Expect-CT</li><li>Feature-Policy</li><li>Cross-Origin-Opener-Policy</li><li>Permission-Policy</li></ul>"
+PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_DESC="Über diese Option können allen unterstützten HTTP Headern auch eigene Werte zugewiesen werden, die Werte hier überschreiben alle vorherigen Konfigurationen!. Die unterstützen HTTP Header sind: <br><ul><li>Strict-Transport-Security</li><li>Content-Security-Policy</li><li>Content-Security-Policy-Report-Only</li><li>X-Frame-Options</li><li>X-XSS-Protection</li><li>X-Content-Type-Options</li><li>Referrer-Policy</li><li>Expect-CT</li><li>Feature-Policy</li><li>Cross-Origin-Opener-Policy</li><li>Permission-Policy</li><li>Report-To</li><li>NEL</li></ul>"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_KEY="HTTP-Header"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_VALUE="HTTP Header Wert"
 PLG_SYSTEM_HTTPHEADER_CONTENTSECURITYPOLICY="<a href='https://scotthelme.co.uk/content-security-policy-an-introduction' target='_blank' rel='noopener noreferrer'>Content Security Policy (CSP)</a>"
diff --git a/language/en-GB/en-GB.plg_system_httpheader.ini b/language/en-GB/en-GB.plg_system_httpheader.ini
@@ -5,7 +5,7 @@ COM_PLUGINS_CSP_FIELDSET_LABEL="Content-Security-Policy (CSP)"
 COM_PLUGINS_HSTS_FIELDSET_LABEL="Strict-Transport-Security (HSTS)"
 PLG_SYSTEM_HTTPHEADER="System - HTTPHeaders"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER="Force HTTP Headers"
-PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_DESC="Using this you can set different values from the default ones and also force headers. The supported headers are: <br><ul><li>Strict-Transport-Security</li><li>Content-Security-Policy</li><li>Content-Security-Policy-Report-Only</li><li>X-Frame-Options</li><li>X-XSS-Protection</li><li>X-Content-Type-Options</li><li>Referrer-Policy</li><li>Expect-CT</li><li>Feature-Policy</li><li>Cross-Origin-Opener-Policy</li><li>Permission-Policy</li></ul>"
+PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_DESC="Using this you can set different values from the default ones and also force headers. The supported headers are: <br><ul><li>Strict-Transport-Security</li><li>Content-Security-Policy</li><li>Content-Security-Policy-Report-Only</li><li>X-Frame-Options</li><li>X-XSS-Protection</li><li>X-Content-Type-Options</li><li>Referrer-Policy</li><li>Expect-CT</li><li>Feature-Policy</li><li>Cross-Origin-Opener-Policy</li><li>Permission-Policy</li><li>Report-To</li><li>NEL</li></ul>"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_KEY="HTTP Header"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_VALUE="HTTP Header Value"
 PLG_SYSTEM_HTTPHEADER_CONTENTSECURITYPOLICY="<a href='https://scotthelme.co.uk/content-security-policy-an-introduction' target='_blank' rel='noopener noreferrer'>Content Security Policy (CSP)</a>"
diff --git a/language/es-ES/es-ES.plg_system_httpheader.ini b/language/es-ES/es-ES.plg_system_httpheader.ini
@@ -5,7 +5,7 @@ COM_PLUGINS_CSP_FIELDSET_LABEL="Cabecera Content-Security-Policy (CSP)"
 COM_PLUGINS_HSTS_FIELDSET_LABEL="Cabecera Strict-Transport-Security (HSTS)"
 PLG_SYSTEM_HTTPHEADER="Sistema - CabecerasHTTP"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER="Forzar Cabeceras HTTP"
-PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_DESC="Usándolo, puedes establecer diferentes valores a los predeterminados y también forzar cabeceras. Las cabeceras admitidas son: <br><ul><li>Strict-Transport-Security</li><li>Content-Security-Policy</li><li>Content-Security-Policy-Report-Only</li><li>X-Frame-Options</li><li>X-XSS-Protection</li><li>X-Content-Type-Options</li><li>Referrer-Policy</li><li>Expect-CT</li><li>Feature-Policy</li><li>Cross-Origin-Opener-Policy</li><li>Permission-Policy</li></ul>"
+PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_DESC="Usándolo, puedes establecer diferentes valores a los predeterminados y también forzar cabeceras. Las cabeceras admitidas son: <br><ul><li>Strict-Transport-Security</li><li>Content-Security-Policy</li><li>Content-Security-Policy-Report-Only</li><li>X-Frame-Options</li><li>X-XSS-Protection</li><li>X-Content-Type-Options</li><li>Referrer-Policy</li><li>Expect-CT</li><li>Feature-Policy</li><li>Cross-Origin-Opener-Policy</li><li>Permission-Policy</li><li>Report-To</li><li>NEL</li></ul>"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_KEY="Cabecera HTTP"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_VALUE="Valor de la cabecera HTTP"
 PLG_SYSTEM_HTTPHEADER_CONTENTSECURITYPOLICY="<a href='https://scotthelme.co.uk/content-security-policy-an-introduction' target='_blank' rel='noopener noreferrer'>Política de Seguridad del Contenido (CSP)</a>"
diff --git a/language/fr-FR/fr-FR.plg_system_httpheader.ini b/language/fr-FR/fr-FR.plg_system_httpheader.ini
@@ -5,7 +5,7 @@ COM_PLUGINS_CSP_FIELDSET_LABEL="Content Security Policy (CSP)"
 COM_PLUGINS_HSTS_FIELDSET_LABEL="Strict Transport Security (HSTS)"
 PLG_SYSTEM_HTTPHEADER="Système - En-têtes HTTP"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER="Forcer les en-têtes HTTP"
-PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_DESC="Vous pouvez ainsi définir des valeurs différentes des valeurs par défaut et forcer les en-têtes. Les en-têtes supportés sont : <br><ul><li>Strict-Transport-Security</li><li>Content-Security-Policy</li><li>Content-Security-Policy-Report-Only</li><li>X-Frame-Options</li><li>X-XSS-Protection</li><li>X-Content-Type-Options</li><li>Referrer-Policy</li><li>Expect-CT</li><li>Feature-Policy</li><li>Cross-Origin-Opener-Policy</li><li>Permission-Policy</li></ul>"
+PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_DESC="Vous pouvez ainsi définir des valeurs différentes des valeurs par défaut et forcer les en-têtes. Les en-têtes supportés sont : <br><ul><li>Strict-Transport-Security</li><li>Content-Security-Policy</li><li>Content-Security-Policy-Report-Only</li><li>X-Frame-Options</li><li>X-XSS-Protection</li><li>X-Content-Type-Options</li><li>Referrer-Policy</li><li>Expect-CT</li><li>Feature-Policy</li><li>Cross-Origin-Opener-Policy</li><li>Permission-Policy</li><li>Report-To</li><li>NEL</li></ul>"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_KEY="En-tête HTTP"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_VALUE="Valeur de l'en-tête HTTP"
 PLG_SYSTEM_HTTPHEADER_CONTENTSECURITYPOLICY="<a href='https://scotthelme.co.uk/content-security-policy-an-introduction' target='_blank' rel='noopener noreferrer'>Politique de sécurité du contenu (CSP)</a>"
diff --git a/language/it-IT/it-IT.plg_system_httpheader.ini b/language/it-IT/it-IT.plg_system_httpheader.ini
@@ -5,7 +5,7 @@ COM_PLUGINS_CSP_FIELDSET_LABEL="Content-Security-Policy (CSP)"
 COM_PLUGINS_HSTS_FIELDSET_LABEL="Strict-Transport-Security (HSTS)"
 PLG_SYSTEM_HTTPHEADER="System - HTTPHeaders"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER="Forza Header HTTP"
-PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_DESC="Utilizzando quest'opzione puoi impostare valori differenti da quelli predefiniti e forzare gli header. Gli header supportati sono: <br><ul><li>Strict-Transport-Security</li><li>Content-Security-Policy</li><li>Content-Security-Policy-Report-Only</li><li>X-Frame-Options</li><li>X-XSS-Protection</li><li>X-Content-Type-Options</li><li>Referrer-Policy</li><li>Expect-CT</li><li>Feature-Policy</li><li>Cross-Origin-Opener-Policy</li><li>Permission-Policy</li></ul>"
+PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_DESC="Utilizzando quest'opzione puoi impostare valori differenti da quelli predefiniti e forzare gli header. Gli header supportati sono: <br><ul><li>Strict-Transport-Security</li><li>Content-Security-Policy</li><li>Content-Security-Policy-Report-Only</li><li>X-Frame-Options</li><li>X-XSS-Protection</li><li>X-Content-Type-Options</li><li>Referrer-Policy</li><li>Expect-CT</li><li>Feature-Policy</li><li>Cross-Origin-Opener-Policy</li><li>Permission-Policy</li><li>Report-To</li><li>NEL</li></ul>"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_KEY="Header HTTP"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_VALUE="Valore Header HTTP"
 PLG_SYSTEM_HTTPHEADER_CONTENTSECURITYPOLICY="<a href='https://scotthelme.co.uk/content-security-policy-an-introduction' target='_blank' rel='noopener noreferrer'>Content Security Policy (CSP)</a>"
diff --git a/language/nl-NL/nl-NL.plg_system_httpheader.ini b/language/nl-NL/nl-NL.plg_system_httpheader.ini
@@ -5,7 +5,7 @@ COM_PLUGINS_CSP_FIELDSET_LABEL="Content-Security-Policy (CSP)"
 COM_PLUGINS_HSTS_FIELDSET_LABEL="Strict-Transport-Security (HSTS)"
 PLG_SYSTEM_HTTPHEADER="Systeem - HTTPHeaders"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER="HTTP Headers forceren"
-PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_DESC="Hiermee kunt u andere waarden instellen dan de standaardwaarden en ook HTTP Headers forceren. De ondersteunde Headers zijn:<br><ul><li>Strict-Transport-Security</li><li>Content-Security-Policy</li><li>Content-Security-Policy-Report-Only</li><li>X-Frame-Options</li><li>X-XSS-Protection</li><li>X-Content-Type-Options</li><li>Referrer-Policy</li><li>Expect-CT</li><li>Feature-Policy</li><li>Cross-Origin-Opener-Policy</li><li>Permission-Policy</li></ul>"
+PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_DESC="Hiermee kunt u andere waarden instellen dan de standaardwaarden en ook HTTP Headers forceren. De ondersteunde Headers zijn:<br><ul><li>Strict-Transport-Security</li><li>Content-Security-Policy</li><li>Content-Security-Policy-Report-Only</li><li>X-Frame-Options</li><li>X-XSS-Protection</li><li>X-Content-Type-Options</li><li>Referrer-Policy</li><li>Expect-CT</li><li>Feature-Policy</li><li>Cross-Origin-Opener-Policy</li><li>Permission-Policy</li><li>Report-To</li><li>NEL</li></ul>"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_KEY="HTTP Header"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_VALUE="HTTP Header waarde"
 PLG_SYSTEM_HTTPHEADER_CONTENTSECURITYPOLICY="<a href='https://scotthelme.co.uk/content-security-policy-an-introduction' target='_blank' rel='noopener noreferrer'>Content Security Policy (CSP)</a>"
diff --git a/language/pt-BR/pt-BR.plg_system_httpheader.ini b/language/pt-BR/pt-BR.plg_system_httpheader.ini
@@ -5,7 +5,7 @@ COM_PLUGINS_CSP_FIELDSET_LABEL="Política de Segurança de Conteúdo (CSP)"
 COM_PLUGINS_HSTS_FIELDSET_LABEL="Strict - Transporte de Segurança (HSTS)"
 PLG_SYSTEM_HTTPHEADER="Sistema - HTTPHeaders"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER="Forçar cabeçalhos HTTP"
-PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_DESC="Usando isso, você pode definir valores diferentes dos padrões e também forçar cabeçalhos. Os cabeçalhos suportados são: <br> <ul><li>Strict-Transport-Security</li><li>Content-Security-Policy</li> <li> Content-Security-Policy-Report-Only </ li > <li> X-Frame-Options </li> <li> X-XSS-Protection </li> <li> X-Content-Type-Options </li> <li> Referrer-Policy </li> < li> Expect-CT </li> <li> Feature-Policy </li> <li> Cross-Origin-Opener-Policy </li> <li> Permission-Policy </li> </ul>"
+PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_DESC="Usando isso, você pode definir valores diferentes dos padrões e também forçar cabeçalhos. Os cabeçalhos suportados são: <br> <ul><li>Strict-Transport-Security</li><li>Content-Security-Policy</li> <li> Content-Security-Policy-Report-Only </ li > <li> X-Frame-Options </li> <li> X-XSS-Protection </li> <li> X-Content-Type-Options </li> <li> Referrer-Policy </li> < li> Expect-CT </li> <li> Feature-Policy </li> <li> Cross-Origin-Opener-Policy </li> <li> Permission-Policy </li> <li> Report-To </li> <li> NEL </li> </ul>"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_KEY="Cabeçalho HTTP"
 PLG_SYSTEM_HTTPHEADER_ADDITIONAL_HEADER_VALUE="Valor do Cabeçalho HTTP"
 PLG_SYSTEM_HTTPHEADER_CONTENTSECURITYPOLICY="<a href='https://scotthelme.co.uk/content-security-policy-an-introduction' target='_blank' rel='noopener noreferrer'>Política de Segurança de Conteúdo (CSP)</a>"
