More secure version suggestion
The page says that this extension has a major security risk because these functions can be used to superficially hide information from sysops and can expose e-mail address.
I have some suggestions to enhances this extension and make it safe:
- Limit its functionnality to some namespace where only sysops can modify pages (MediaWiki:) to define message.
- Add the possibility to select only some functionnality of this extension and disable the other (like #useremail).
It would be great to enable this extension on Wikimedia sites, in particular for the #username, otherwise the {{gender:}} tag is quite useless.
Hi, after some comments from Platonides here: Special:Code/MediaWiki/106597, I rechecked this page and I've seen your comments. I'm going to add these possibilities. Would you and other users suggest some defaults for each of these two points?
Perhaps a setting like $wgUFDisclosePrivateInformation might be a good idea to control if #realname, #useremail should be enabled or not. Something like $wgUFDiscloseRealName or $wgUFDiscloseUserName would allow a more fine grained control, but I do not think that is necessary. To remove these functions is not a good idea since there are valid usecases around for wikis. Cheers
