GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing www.mediawiki.org — Extension:SaferHTMLTag - MediaWiki

Warning: The code or configuration described here poses a major security risk.

Site administrators: You are advised against using it until this security issue is resolved.

Problem: The html tag check can be bypassed by obfuscating the html tag, leading to a false sense of security. See https://github.com/Wikimedica/mediawiki-extensions-SaferHTMLTag/issues/5

**MediaWiki extensions manual**
SaferHTMLTag Release status: stable
Implementation	Tag , User rights
Description	Allows only sysops and certain user groups to edit pages containing the `‎<html>` tag.
Author(s)	Antoine Mercier-Linteau (Tinss^talk)
Latest version	0.4 (2024-02-19)
Compatibility policy	Master maintains backward compatibility.
MediaWiki	1.35+
Added rights edit-html
Hooks used EditPage::showEditForm:initial TitleGetEditNotices EditFilterMergedContent getUserPermissionsErrors
Licence	GNU General Public License 2.0 or later
Download	GitHub: project page git repository URL commit history Note: No localisation updates are provided by translatewiki.net . README

The SaferHTMLTag extension prevents edition of pages that contain the ‎<html> tag by unauthorized users and groups.

Installation

Download, extract and place the file(s) in a directory called SaferHTMLTag in your extensions/ folder.
Add the following code at the bottom of your LocalSettings.php file:
```
wfLoadExtension( 'SaferHTMLTag' );
```
Done – Navigate to Special:Version on your wiki to verify that the extension is successfully installed.

To enable for a group (eg: sysops), add the following to you LocalSettings.php file:

$wgGroupPermissions['sysop']['edit-html'] = true; // Enable in-wiki HTML editing for sysops.