Manual:$wgCrossSiteAJAXdomainExceptions/ja

詳細
Domains that should not be allowed to make AJAX requests, even if they match one of the domains allowed by.

と同じ構文を使用します.