Board Thread:General Discussion/@comment-25523075-20150727172451/@comment-11733175-20150727211330

The code-editor group was designed to alleviate the issues to a degree, as it adds a layer of security to js pages on dev wiki. However, the group is only added to accounts with demonstrable knowledge of js leaving the current flaw.

In an ideal world we'd use global gadgets, but that's not going to happen in the foreseeable future.