Thread:Kirkburn/@comment-25739558-20160204185225/@comment-126761-20160205123510

I don't think it's appropriate for me to talk about the first part - however, I can give more detail on the rest. (Well, the translator one might be more self-evident, but our translation work has changed significantly in recent months - to be much better organized - so I'm not sure of the specifics around that one.)

Since every MediaWiki message can potentially be utilized in a different way by multiple different bits of code, we have to start from the principle that they are all vulnerable. We then have to review all code involving them to be able to say they're okay.

Regarding CheckUser - it basically requires extreme need, and very strong trust. It's the kind of thing that is reviewed on a case-by-case basis.