WikimediaCustomizations serves as the place to store Wikimedia-specific supplements to other extensions, and other Wikimedia-specific customizations which are too simple to merit an extension of their own but too complex to handle via configuration overrides. This means that the extension won't be owned by a single team; extension-related parts will be owned by the team that owns the extension, and other parts will be generally owned by whoever added them.
Please structure new code in such a way that it is easy to tell who owns what, and add an entry to this file documenting the ownership. E.g.
example component
- [Files/Folders]: [list of files/Folders]
- Contact: [team page URL]
[description of what the component does]
(i18n files can be shared, since it takes extra administration to split those; but make sure you use a unique key prefix for each component.)
The general expectation is the same as with deploying a new extension: you shouldn't do it unless your team is taking ownership of the code, or you have arranged ownership with some other team.
The exception is moving over legacy unowned code from operations/mediawiki-config etc. You should still add an OWNERS.md entry, but mark it as unowned.
Prevents the use of email providers which appear on a deny-list. Used to disallow disposable email addresses.
Originally moved here from the private Wikimedia repo, see history there for more context.
Support for donor identification (currently not used in production).
Business logic for when the EmailAuth extension should perform email verification.
Most of it should probably be moved to EmailAuth.
Password policies and additional logging for members of privileged groups.
Adds a rate limit class ('rlc') field to JWTs associated with login sessions. Used to enforce low-level rate limits (outside of MediaWiki). Historical context: T399632, T415588.
Adds more security-related Logstash logging and enriches some existing logs.
Experimental REST API definition and related code for exposing structured attribution information about Wikimedia page, media or site, as defined by the Attribution Framework work.
To expose the REST endpoint in Special:RestSandbox, add this to LocalSettings.php:
$wgRestSandboxSpecs['attribution.v0-beta'] = [ 'url' => $wgScriptPath . '/rest.php/specs/v0/module/attribution/v0-beta', 'name' => 'Attribution API', ];
Allows staff members to perform global bans on Wikimedia wikis. This was a gadget that ported over here and was originally written by ladsgroup. See the ban policy at https://meta.wikimedia.org/wiki/WMF_Global_Ban_Policy
Support for Discord's HTML header that allows us to customize page previews.
Wikimedia-specific overrides to the SuggestedInvestigations feature.