Last modified: 2013-04-05 00:12:54 UTC
New users should not be able to run scripts. There's been a recent rash of vandalism where vandals register a new account, paste in a monobook script (like twinkle), and use it to vandalize (http://en.wikipedia.org/wiki/Special:Contributions/REDyellowGreenBLUE) Please limit running scripts to auto-approved users.
Is there consensus to do this on enwiki? It'd probably be fairly trivial to add a check before loading a user's monobook that they are autoconfirmed, but that doesn't stop them from using it with a tool like greasemonkey.
Needs consensus to implement.
Would be easy enough to do in ResourceLoaderUserModule--add usercss & userjs rights to 'user' so no change in default config. REOPENING.
No consensus found in 15 more months and if not by RateLimits they're surely doing it via AbuseFilter.