Manual:$wgMetadataWhitelist

Details
Full name (including namespace) of the page containing templates names that will be allowed as metadata. This setting exists since r6887 but has only been added in DefaultSettings.php in r40925.