MediaWiki:Configure-setting-wgCrossSiteAJAXdomainExceptions/en

Domains that should not be allowed to make AJAX requests, even if they match one of the domains allowed by $wgCrossSiteAJAXdomains