Extension:SaferHTMLTag
Warning: The code or configuration described here poses a major security risk. Site administrators: You are advised against using it until this security issue is resolved. Problem: The html tag check can be bypassed by obfuscating the html tag, leading to a false sense of security. See https://github.com/Wikimedica/mediawiki-extensions-SaferHTMLTag/issues/5 |
![]() Release status: stableCategory:Stable extensions |
|
---|---|
Implementation | TagCategory:Tag extensions, User rightsCategory:User rights extensions |
Description | Allows only sysops and certain user groups to edit pages containing the <html> tag. |
Author(s) | Antoine Mercier-Linteau (Tinsstalk) |
Latest version | 0.4 (2024-02-19) |
Compatibility policy | Master maintains backward compatibility.Category:Extensions with master compatibility policy |
MediaWiki | 1.35+Category:Extensions with manual MediaWiki version |
License | GNU General Public License 2.0 or later |
Download | GitHub: Note: README |
edit-html
Category:Extensions which add rights |
|
The SaferHTMLTag extension prevents edition of pages that contain the <html>
tag by unauthorized users and groups.
Installation
- Download, extract and place the file(s) in a directory called
SaferHTMLTag
in yourextensions/
folder. - Add the following code at the bottom of your LocalSettings.php file:
wfLoadExtension( 'SaferHTMLTag' );
Done – Navigate to Special:Version on your wiki to verify that the extension is successfully installed.
Enabling for a group
To enable for a group (eg: sysops), add the following to you LocalSettings.php file:
$wgGroupPermissions['sysop']['edit-html'] = true; // Enable in-wiki HTML editing for sysops.
See also
- Extension:Secure_HTML - Lets you include arbitrary HTML in an authorized and secure way.
Category:All extensions
Category:EditFilterMergedContent extensions
Category:EditPage::showEditForm:initial extensions
Category:Extensions in GitHub version control
Category:Extensions not in ExtensionJson
Category:Extensions which add rights
Category:Extensions with manual MediaWiki version
Category:Extensions with master compatibility policy
Category:Extensions with security vulnerabilities
Category:Extensions without an image
Category:GPL licensed extensions
Category:GetUserPermissionsErrors extensions
Category:Stable extensions
Category:Tag extensions
Category:TitleGetEditNotices extensions
Category:User rights extensions