Extension:GlobalCssJs

The GlobalCssJs extension allows loading CSS and JavaScript (JS) from a central wiki.

It supports wiki farm-wide and individual site-wide "MediaWiki:Global.js"/"MediaWiki:Global.css" pages and per-user "User:$username/global.js"/"User:$username/global.css" pages on a specified central wiki. The term "global" is used to mean across a wiki farm (compare with Extension:GlobalUsage) and the capitalization ("Css" and "Js") is due to MediaWiki extension naming conventions.

If you are not using shared user tables or CentralAuth, this extension can open up a XSS vector, which allows other users to hijack the user's account, among other things. See #Hook for information on how to integrate your authentication extension with this one.

This extension requires core fixes implemented in MediaWiki 1.24. Older versions of the extension will not work, nor will this extension work with older versions of MediaWiki core.

wgUseGlobalSiteCssJs
Whether to enable MediaWiki:Global.js/MediaWiki:Global.css pages. By default enabled.

wgGlobalCssJsConfig
ResourceLoader configuration of the global wiki. By default, no global wiki is specified.


 * should be set to the database name of the central wiki.
 * should be the name of the ResourceLoader source.

An example configuration might look like:

To test it our locally without a central repository, point it at the local wiki, like so:

Hook
If you are not using shared user tables for managing users, you can use a hook to state whether a user on one wiki is equal to another.

is the wiki the JS/CSS is being taken from, and  is the current wiki the request is being executed on. The hook will not be called if.

The function should return true if the users are the same, and false if they are not. An example subscriber can be found in the CentralAuth extension.

Usage
See Help:Extension:GlobalCssJs for details.