Author: mapellegrini
Description:
New users should not be able to run scripts. There's been a recent rash of vandalism where vandals register a new account, paste in a monobook script (like twinkle), and use it to vandalize (http://en.wikipedia.org/wiki/Special:Contributions/REDyellowGreenBLUE)
Please limit running scripts to auto-approved users.
Version: unspecified
Severity: normal
EN.WP.ST47 wrote:
Is there consensus to do this on enwiki? It'd probably be fairly trivial to add a check before loading a user's monobook that they are autoconfirmed, but that doesn't stop them from using it with a tool like greasemonkey.
Would be easy enough to do in ResourceLoaderUserModule--add usercss & userjs rights to 'user' so no change in default config.
REOPENING.
No consensus found in 15 more months and if not by RateLimits they're surely doing it via AbuseFilter.