Manual:$wgCrossSiteAJAXdomainExceptions/es

Detalles
Domains that should not be allowed to make AJAX requests, even if they match one of the domains allowed by.

Usa la misma sintaxis que $CrossSiteAJAXdomains.