Manual:$wgMetadataWhitelist

Details
Full name (including namespace) of the page containing templates names that will be allowed as metadata.

This setting exists since  but has only been added in DefaultSettings.php in .