| Index: branches/RL2/extensions/Gadgets/README |
| — | — | @@ -34,6 +34,8 @@ |
| 35 | 35 | |
| 36 | 36 | == Caveats == |
| 37 | 37 | |
| 38 | | -* Gadgets do not apply to Special:Preferences, Special:UserLogin and |
| 39 | | - Special:ResetPass so users can always disable any broken gadgets they |
| 40 | | - may have enabled, and malicious gadgets will be unable to steal passwords. |
| | 38 | +* Gadget modules extend ResourceLoaderWikiModule and thus qualify as having |
| | 39 | + origin ORIGIN_USER_SITEWIDE. This means that gadgets are never loaded on (special) pages |
| | 40 | + that call OutputPage::disallowUserJs(). For example Special:Preferences, Special:UserLogin |
| | 41 | + Special:ResetPass and Special:Gadgets so users can always disable any broken gadgets |
| | 42 | + they may have enabled, and malicious gadgets will be unable to steal passwords. |