US
♟ Tgr
https://phabricator.wikimedia.org/p/Tgr
… (Incident Followup) Security MediaWiki-extensions-OAuth Tgr added a comment to T206012: dont allow editing js and raw html messages over cors Somewhat related: T210909: Introduce secure mode to MediaWiki (which proposes disallowing CORS entirely while in secure mode) Mar 8 2026,…