FYI: [img] image embedding is disabled on the forums
Bharat Mediratta <[email protected]> Wed, 12 Jun 2013 22:02:53 -0700
| Newsgroups | gmane.comp.web.gallery.devel |
|---|---|
| Message-ID | <CAESa+_mxy4erjE1gJVKvRD6NKaph=m1garAzVdkTU0U0NR7G_Q@mail.gmail.com> |
--===============8654787348849461739== Content-Type: multipart/alternative; boundary=089e015385ac58db1d04df020da4 --089e015385ac58db1d04df020da4 Content-Type: text/plain; charset=ISO-8859-1 Hey guys. John Carroll alerted us to a potential vulnerability with embedding images from remote servers on pages that we serve from our forums. It's a relatively low risk that is unlikely to affect our users, but it's worth guarding against. As a result, I've disabled this embedding feature. When we upgrade Drupal to version 7 (under way!) we can bring this functionality back. Sorry. Security is the enemy of convenience and all that. -Bharat --089e015385ac58db1d04df020da4 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><br><div style>Hey guys. =A0John Carroll alerted us to a p= otential vulnerability with embedding images from remote servers on pages t= hat we serve from our forums. =A0It's a relatively low risk that is unl= ikely to affect our users, but it's worth guarding against. =A0As a res= ult, I've disabled this embedding feature. =A0When we upgrade Drupal to= version 7 (under way!) we can bring this functionality back. =A0</div> <div style><br></div><div style>Sorry. =A0Security is the enemy of convenie= nce and all that.</div><div style><br></div><div style>-Bharat</div></div> --089e015385ac58db1d04df020da4-- --===============8654787348849461739== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev --===============8654787348849461739== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline __[ g a l l e r y - d e v e l ]_________________________ [ list info/archive --> http://gallery.sf.net/lists.php ] [ gallery info/FAQ/download --> http://gallery.sf.net ] --===============8654787348849461739==--