FYI: [img] image embedding is disabled on the forums

Bharat Mediratta <[email protected]> Wed, 12 Jun 2013 22:02:53 -0700
Newsgroups gmane.comp.web.gallery.devel
Message-ID <CAESa+_mxy4erjE1gJVKvRD6NKaph=m1garAzVdkTU0U0NR7G_Q@mail.gmail.com>
--===============8654787348849461739==
Content-Type: multipart/alternative; boundary=089e015385ac58db1d04df020da4

--089e015385ac58db1d04df020da4
Content-Type: text/plain; charset=ISO-8859-1

Hey guys.  John Carroll alerted us to a potential vulnerability with
embedding images from remote servers on pages that we serve from our
forums.  It's a relatively low risk that is unlikely to affect our users,
but it's worth guarding against.  As a result, I've disabled this embedding
feature.  When we upgrade Drupal to version 7 (under way!) we can bring
this functionality back.

Sorry.  Security is the enemy of convenience and all that.

-Bharat

--089e015385ac58db1d04df020da4
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div style>Hey guys. =A0John Carroll alerted us to a p=
otential vulnerability with embedding images from remote servers on pages t=
hat we serve from our forums. =A0It&#39;s a relatively low risk that is unl=
ikely to affect our users, but it&#39;s worth guarding against. =A0As a res=
ult, I&#39;ve disabled this embedding feature. =A0When we upgrade Drupal to=
 version 7 (under way!) we can bring this functionality back. =A0</div>

<div style><br></div><div style>Sorry. =A0Security is the enemy of convenie=
nce and all that.</div><div style><br></div><div style>-Bharat</div></div>

--089e015385ac58db1d04df020da4--


--===============8654787348849461739==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
--===============8654787348849461739==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

__[ g a l l e r y - d e v e l ]_________________________

[ list info/archive --> http://gallery.sf.net/lists.php ]
[ gallery info/FAQ/download --> http://gallery.sf.net ]
--===============8654787348849461739==--