I've done exactly what was suggested to fix the security issue: actions_excluded = ['newaccount', 'RenderAsDocbook', 'SyncPages', 'xmlrpc', 'PackagePages', 'Raw Text', 'twikidraw', 'anywikidraw', ] but the page is rendered without an error message, see the bottom of this page http://sandbox.aplwiki.com/TestPage1 Advice is welcome Kai