Manual:$wgMetadataWhitelist

Details
Full name (including namespace) of the page containing templates names that will be allowed as metadata. This setting exists since but has only been added in DefaultSettings.php in.

Since 1.16.0, this is part of Extension:MetadataEdit.