Manual:$wgWhitelistRead/de-formal

<translate> User rights, access control and monitoring</translate>: $wgWhitelistRead
Pages anonymous user may see.
<translate> Introduced in version:</translate>	1.1.0
<translate> Removed in version:</translate>	<translate> still in use</translate>
<translate> Allowed values:</translate>	(array of page names) or false
<translate> Default value:</translate>	false
<translate> Other settings:</translate> <translate> Alphabetical</translate> | <translate> By function</translate>

File:OOjs UI icon notice-destructive.svg <translate> Warning:</translate>

<translate> MediaWiki from 1.32 to 1.35.4, 1.36.2, 1.37.0 contain a security issue that allow unprivileged editing of arbitrary page and arbitrary JavaScript execution.</translate> <translate> If you are using one of these versions and can not upgrade to a newer version, please see <tvar name=1>2021-12 security release/FAQ </tvar> for a workaround.</translate>

Details

If a group of users is blocked from viewing the wiki by using the $wgGroupPermissions configuration parameter...

$wgGroupPermissions[...]['read'] = false;

...you may still want them to be able to view certain key pages, in particular the main page! This setting holds an array of page names that all users are allowed to view, regardless of their group permissions.

A recommended minimum which allows everyone to view the home page and the login screen as well as loading CSS/JS customizations is as follows:

MediaWiki ≥ 1.18.1

$wgWhitelistRead = [
    'Main Page',
    'MediaWiki:Common.css',
    'MediaWiki:Common.js'
    ];

"Main Page" uses spaces instead of underscores between words.

File:OOjs UI icon notice-destructive.svg <translate> Warning:</translate>

If you are using a content language other than English, you may need to use the translated special page names instead of their English names.

See also

• $wgWhitelistReadRegexp

References