[prev in list] [next in list] [prev in thread] [next in thread] 

List:       mediawiki-l
Subject:    Re: [MediaWiki-l] Editing extension configuration from the wiki
From:       Robert Vogel <vogel () hallowelt ! com>
Date:       2019-04-05 12:42:45
Message-ID: 1554468164.9849.14.camel () hallowelt ! com
[Download RAW message or body]

Hi!

A common approach to this is to use the MediaWiki I18N system. You
could define a message key (e.g. "my-iframe-whitelist").

On the Wiki users with the "edit-interface" permission (usually admins)
can then edit the page "MediaWiki:My-iframe-whitelist" and add list of
keys in form of wikitext.

In you extension code you can access this list by using `wfMessage('my-
iframe-whitelist')->plain()` and process it.

--
Robert Vogel

Am Freitag, den 05.04.2019, 05:18 -0700 schrieb Jan Steinman:
> > 
> > From: Sigbert Klinke <sigbert@wiwi.hu-berlin.de>
> > 
> > for my Extension Iframe I have for security reasons a key
> > parameter…
> > 
> > Is there a way how I can easily allow to edit the key list from
> > the  
> > wiki, e.g. for all users with admin rights?
> I don't know about "easily," but if you know some PHP, it shouldn't
> be too hard to make a special-purpose extension to do so, assuming
> the keys are stored in a global variable.
> 
> I'd start by looking at existing extensions that do something similar
> to what you want to do, then modifying a copy.
> 
> But in looking at your example, I don't really understand what
> security you are gaining by doing this. Surely, someone can guess the
> scheme and type URLs to the browser, no? Or am I missing something
> about this security scheme?
> 
> Jan
> 
> 
> _______________________________________________
> MediaWiki-l mailing list
> To unsubscribe, go to:
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
_______________________________________________
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

[prev in list] [next in list] [prev in thread] [next in thread]