Extension:GlobalCssJs

This extension allows loading of global CSS and JS from a central wiki (good for use on wiki farms). It currently supports a "MediaWiki:Global.js/.css" and a per-user "User:$username/global.js/.css". If you are not using shared user tables or CentralAuth, this extension can open up a XSS vector, which allows other users to hijack the user's account, among other things. See for information on how to integrate your authentication extension with this one.

Configuration

 * Whether to enable MediaWiki:Global.js/Global.css pages. By default enabled.


 * ResourceLoader configuration of the global wiki. 'wiki' should be set to the database name of the central wiki, and 'source' should be the name of the ResourceLoader source. An example configuration might look like:

Hook
If you are not using shared user tables for managing users, you can use a hook to state whether a user on one wiki is equal to another.

$centralWiki is the wiki the JS/CSS is being taken from, and $localWiki is the current wiki the request is being executed on. The hook will not be called if $centralWiki === $localWiki.

The function should return true if the users are the same, and false if they are not. An example subscriber can be found in the CentralAuth extension.