Board Thread:General Discussion/@comment--20150814190019/@comment-2200849-20150814225644

452 wrote: Admins will be able to write JS and submit it for review. Then a group will review code changes to ensure they are both secure and don’t include any major breaking changes. That is a ridiculous solution.

I've made over 500 edits to Mediawiki:Common.js, and have 15 subscripts with many more edits. The concept of having to submit minor changes for review is preposterous.

And the concept of "all admins are guilty of adding malicious javascript until reviewed to be innocent" is insulting to all admins who have never done so. While imperfect, this is a decent interim solution. It might be subject to change in the long run. I agree with your point that the bulk of admins never write anything malicious, but there needs to be an added layer of mitigation (code review or anything else) when it comes to a wiki farm this large.