Thread:Deadcoder/@comment-5590118-20150816093436/@comment-5973717-20150816163642

That sounds wise.

BTW, I had a great idea that I'm prototyping on my machine. One of the most common things made in user-generated Javascript is twitter widgets. My idea is that rather than having everyone make custom code for each widget, we write code that goes through each of a particular tag, and makes the twitter widgets. That way, you can add any twitter widgets you want without special scripts or the Mediawiki namespace, and we only have one script to audit. I think this will be a lot safer, since there's less vectors of attack.