Guild Wars Wiki:Requests for technical administration/User CSS and JS
From Guild Wars Wiki
Jump to navigationJump to search
Request for user CSS and JS[edit]
- Type
- MediaWiki configuration
- Additional software requirements
- None
- Additional server-side maintenance requirements
- The following need to be added to
LocalSettings.php:
$wgEnableUserCss = true; $wgEnableUserJs = true;
- Reason for request
- User CSS and JS allows registered users to configure the look and feel of the wiki to suit their preferences. For example, they may use CSS to switch the fonts to serif and change the placement of various boxes, or use JS to hide images used in signatures and re-configure the keyboard shortcuts. This greatly enhances the usability of the site for these users. Note that this only changes how the pages appear to the users who choose to use user CSS and JS when they're logged in; it cannot affect any other user. Also note that user CSS and JS pages are protected by default to allow only the user (or an administrator) to modify them; thus, no malicious user can change the appearance of the wiki for other users.
- What else uses it
- All Wikimedia projects have user CSS and JS enabled, as does GuildWiki.
- Possible pitfalls
- User JS can make them susceptible to cross-site scripting attacks, but only if they are careless enough to call external Javascript programs not under their own control.
- User JS can potentially cause increased server-side load if users use it to do strange things such as using
xmlHttpRequest()to load a number of other pages. Note that this does not increase their ability to perform denial-of-service on the site, as the equivalent load can be simulated easily by having them run the requisite number of wgets. Also note that IIS has several automatic throttling mechanisms built in to prevent just this sort of DOS attacks.
