Viewing abuse filter 4: Possible script injection attempt

Filter parameters

Filter ID:	4
Description: (publicly viewable)
Conditions:	action == "edit" & !("sysop" in user_groups) & (added_lines contains "<script" \| added_lines contains "javascript:" \| added_lines contains "{{#invoke:" \| added_lines rlike "on(click\|load\|error\|mouse)\s*=")
Notes:	Triggers on script tags, javascript: URIs, suspicious event handlers, or raw Scribunto invocations in page content.
Flags:	Hide details of this filter from public view Enable this filter Mark as deleted
Filter last modified:	14:49, 5 April 2026 by Admin (talk \| contribs)
History:	View this filter's history
Tools:	Export this filter to another wiki {"data":{"rules":"action == \"edit\" \u0026 !(\"sysop\" in user_groups) \u0026 (added_lines contains \"\u003Cscript\" \| added_lines contains \"javascript:\" \| added_lines contains \"{{#invoke:\" \| added_lines rlike \"on(click\|load\|error\|mouse)\\s*=\")","name":"Possible script injection attempt","comments":"Triggers on script tags, javascript: URIs, suspicious event handlers, or raw Scribunto invocations in page content.","group":"default","actions":[],"enabled":true,"deleted":false,"privacylevel":0,"global":false},"actions":[]}

Actions to take when matched

Trigger actions only if the user trips a rate limit

Number of actions to allow:

Period of time (in seconds):

Group throttle by:

user

Trigger these actions after giving the user a warning

System message to use for warning:

Page name of other message:

(without "MediaWiki:" prefix)

Prevent the user from performing the action in question

System message to use for disallowing:

Page name of other message:

(without "MediaWiki:" prefix)

Revoke the user's autoconfirmed status

Block the user and/or IP address from editing

Block the user and/or IP address from editing their own talk page

Block duration for non-registered users:

Block duration for registered users:

Tag the edit for further review

Tags to apply:

Anonymous