Extension:GlobalCssJs

This extension allows loading CSS and JavaScript (JS) from a central wiki.

The GlobalCssJs extension supports wiki farm-wide and individual site-wide "MediaWiki:Global.js"/"MediaWiki:Global.css" pages and per-user "User:$username/global.js"/"User:$username/global.css" pages on a specified central wiki. The term "global" is used to mean across a wiki farm (compare with Extension:GlobalUsage) and the capitalization ("Css" and "Js") is due to MediaWiki extension naming conventions.

If you are not using shared user tables or CentralAuth, this extension can open up a XSS vector, which allows other users to hijack the user's account, among other things. See for information on how to integrate your authentication extension with this one.

This extension requires a new core hook that was introduced in MediaWiki 1.24. You might be able to get an older version of the extension to work, however it doesn't invalidate caches properly.

Configuration

 * Whether to enable MediaWiki:Global.js/MediaWiki:Global.css pages. By default enabled.


 * ResourceLoader configuration of the global wiki. 'wiki' should be set to the database name of the central wiki, and 'source' should be the name of the ResourceLoader source. An example configuration might look like:

Hook
If you are not using shared user tables for managing users, you can use a hook to state whether a user on one wiki is equal to another.

is the wiki the JS/CSS is being taken from, and  is the current wiki the request is being executed on. The hook will not be called if.

The function should return true if the users are the same, and false if they are not. An example subscriber can be found in the CentralAuth extension.

Usage
See Help:Extension:GlobalCssJs for details.