Board Thread:Support Requests - Getting Technical/@comment-4748628-20140729181943/@comment-4748628-20140811151234

Cqm wrote: All I can suggest is to store the colours in a js object on a .js page, e.g. window.colours = window.colours || {}; window.colours[wgUserName] = { // colour settings go here }; From there you can import all the user files in one go using resourceloader as it seems you want to load lots of user's setting at once. You can actually use  for this. Once that's done, you can access  and manipulate it however you want. And all this is done in a single, fairly quick http request.

You idea to use mw.loader (or rather mw.messages) isn't really feasible, or at least in terms of how you want to replicate how MediaWiki ns messages are loaded. For one, you need to be able to edit the MediaWiki ns to be able to setthe colours, which isn't available for the vast majority of users.

So after trying to implement this, I realized that this leaves everyone using the code open to javascript attacks by simply modifying your own page. Is there a good way to prevent this?