Extension:SourceProtection
MediaWiki was not written to provide per-page access restrictions.
Extensions that provide additional restrictions can help with security, but can also just appear to be secure, which could lead to exposure of confidential data. Neither the developers nor the Wikimedia Foundation are responsible for anything being leaked. By using this extension or extensions of this nature, you agree to indemnify the aforementioned parties and hold potential negligence by developers harmless. This message is added to all extensions of this nature and may not reflect the actual security status of this extension. For further details, see Security issues with authorization extensions |
SourceProtection Release status: stable |
|
---|---|
Implementation | User rights |
Description | Removes the ability to view the source code of a page if a user does not have edit rights. |
Author(s) | Sen-Saitalk |
Latest version | 1.1.3 (2023-06-09) |
Compatibility policy | For every MediaWiki release that is a Long Term Support release there is a corresponding branch in the extension. |
MediaWiki | 1.35.+;1.39+ |
PHP | 5.4+ - 8.1 |
Database changes | No |
License | GNU General Public License 2.0 or later |
Download | GitHub: Note: |
The SourceProtection extension removes the ability to view the source code of a page if a user does not have edit rights through disabling certain actions.
The following actions are disabled which may provide access to the source code:
- edit
- move
- history
- info
- raw
- delete
- revert
- revisiondelete
- rollback
- markpatrolled
Additionally, the SourceProtection extension removes the following tabs from a page if a user may not edit:
- View source
- History
- Edit with form (if Page Forms is installed)
Installation
edit- Download and place the file(s) in a directory called
SourceProtection
in yourextensions/
folder. - Add the following code at the bottom of your LocalSettings.php file:
wfLoadExtension( 'SourceProtection' );
- Done – Navigate to Special:Version on your wiki to verify that the extension is successfully installed.
Version history
edit- Version 1.1.3 (2023-06-09)
MW 1.39+ support
- Version 1.1.2 (2021-05-13)
Checked compatibility with 1.35+. No major changes, just typos or comments added
- Version 1.1.1 (2017-10-10)
Added more actions for user without edit permissions to protect the source of a page more thoroughly.
- Version 1.1.0 (2017-08-08)
Removes View Source tab and (if Page Forms is installed the edit-Form tab) & History tab from menu and disables action=edit function for users with no edit permissions. It will also block the viewing of the readonly form.
- Version 1.0
Initial version (prototype)