Extension:NamespaceHTML
<translate> Warning:</translate> <translate> The code or configuration described here poses a major security risk.</translate> <translate> Site administrators:</translate> <translate> You are advised against using it until this security issue is resolved.</translate> <translate> Problem:</translate> Namespace detection code can be tricked allowing raw html to be unsafely executed. This is possible even for attackers who do not have any edit rights. Bawolff (talk) 04:17, 13 February 2023 (UTC) <translate> Solution:</translate> Use a different extension like extension:Widgets Bawolff (talk) 04:17, 13 February 2023 (UTC) |
A request to archive this extension has been made on Phabricator. See <translate> task <tvar name=1>T360235</tvar></translate> for the archival request and the rationale for the request, and to leave comments about the request. |
<translate> This extension is currently not actively maintained!</translate> <translate> Although it may still work, any bug reports or feature requests will more than likely be ignored.</translate> <translate> If you are interested in taking on the task of developing and maintaining this extension, [[<tvar name=request>Special:MyLanguage/Gerrit/Privilege policy#Requesting Gerrit privileges</tvar>|you can request repository ownership]].</translate> <translate> As a courtesy, you may want to contact the author.</translate> <translate> You should also remove this template and list yourself as maintaining the extension in the page's <tvar name=extension>{{Extension}}</tvar> infobox.</translate> |
| NamespaceHTML Release status: unmaintained |
|
|---|---|
| Implementation | Tag |
| Description | Allows raw HTML in specified namespaces |
| Author(s) | Ike Hecht (tosfostalk) |
| Latest version | 0.4 () |
| Compatibility policy | For every MediaWiki release that is a Long Term Support release there is a corresponding branch in the extension. |
| MediaWiki | 1.35, 1.39 |
| Database changes | No |
| License | GNU General Public License 2.0 or later |
| Download | |
|
$wgRawHtmlNamespaces |
|
|
<html> |
|
| Quarterly downloads | Lua error in Module:Extension at line 172: bad argument #1 to 'inNamespace' (unrecognized namespace name 'skin'). |
| Public wikis using | Lua error in Module:Extension at line 172: bad argument #1 to 'inNamespace' (unrecognized namespace name 'skin'). |
| Translate the NamespaceHTML extension if it is available at translatewiki.net | |
| Issues | Open tasks · Report a bug |
The NamespaceHTML extension allows raw HTML in specified namespaces. It is intended to work just like the $wgRawHtml setting. The difference is that this extension allows specifying which namespace(s) should be able to contain raw HTML, which allows administrators to restrict raw HTML to namespaces with sufficient edit protections.
This extension was created for WikiWorks.
Usage
Embed raw html within <html>...</html> tags.
See Manual:$wgRawHtml for more information.
As a template
The extension allows inclusion from namespaces where HTML is allowed to namespaces where HTML is not. You can create a custom script namespace and allow HTML in that namespace. Then you can create pages in the script namespace that contain safe scripts which can be transcluded into any page.
Technically, you can use the #tag parser function to pass parameters to the template. See here for an example. However, it is a better idea to use the Widgets extension for that.
Widget examples
- To add a Pinterest feed: Extension:NamespaceHTML/Pinterest Widget
Installation
- <translate> [[<tvar name=2>Special:ExtensionDistributor/NamespaceHTML</tvar>|Download]] and move the extracted <tvar name=name>
NamespaceHTML</tvar> folder to your <tvar name=ext>extensions/</tvar> directory.</translate>
<translate> Developers and code contributors should install the extension [[<tvar name=git>Special:MyLanguage/Download from Git</tvar>|from Git]] instead, using:</translate>cd extensions/
git clone https://gerrit.wikimedia.org/r/mediawiki/extensions/NamespaceHTML - <translate> Add the following code at the bottom of your <tvar name=1>LocalSettings.php</tvar> file:</translate>
wfLoadExtension( 'NamespaceHTML' );
- Configure as required.
- File:OOjs UI icon lightbulb-yellow.svg <translate> Note:</translate>
$wgRawHtmlNamespaces = [];must be configured, see below. - File:OOjs UI icon check-constructive.svg <translate> Done</translate> – <translate> Navigate to <tvar name=special>Special:Version</tvar> on your wiki to verify that the extension is successfully installed.</translate>
Configuration
- $wgRawHtmlNamespaces
- List of the namespaces where raw HTML should be enabled. See this page for more information about namespace constants. For example:
# allow raw HTML but only in the Project: & User: namespaces $wgRawHtmlNamespaces = [ NS_PROJECT, NS_USER ];
See also
- HTML restriction - list of extensions that allow for the inclusion of raw HTML
- Extension:Secure HTML - adds "secret key" protection for html sections
- Extension:SaferHTMLTag - allows only sysops and certain user groups to edit pages containing the
<html>tag - Extension:HTMLets - Serves HTML from server files
- Pages with script errors
- Pages with broken file links
- Extensions with XSS vulnerabilities
- Unmaintained extensions
- Extensions without an image
- Tag extensions
- Extensions with long-term support release branches compatibility policy
- Extensions with manual MediaWiki version
- GPL licensed extensions
- Extensions in Wikimedia version control
- ParserFirstCallInit extensions
- All extensions
