Description [ edit ]

Enables/disables user JavaScript pages . This enables a lot of neat customizations, but may increase security risk to users and server load. (Personal scripts can only be edited by the owner and interface administrators , but they may still serve as vectors for various social engineering based attacks.)

A related setting $wgAllowUserCss allows/disallows users to use their own CSS files.

Usage [ edit ]

To enable users to perform their own JavaScript, append the following line to your LocalSettings.php file:

$wgAllowUserJs
 =
 true
;

To disable this function set $wgAllowUserJs to false or delete whole line.

Important note [ edit ]

Microsoft Internet Explorer and Mozilla/Firefox allow the embedding of JavaScript into stylesheets using HTC or XBL. So in order to prevent users from defining JavaScript, you need to disable $wgAllowUserCss as well.

See also [ edit ]

• Manual:Custom edit buttons
• Manual:Interface/JavaScript
• Manual:$wgUseSiteJs
• Manual:$wgUseSiteCss
• Manual:$wgAllowUserCss