Skip to content

Disable inline images

Alex Gleason requested to merge disable-inline-images into develop

See thread for context: https://gleasonator.com/@alex/posts/AQ0bhAhsZR7PqNTCjY

Also:

The actual fix is to disable inline images, which would also fix:

Sanitizing posts before they hit the database is probably also a good idea, but I'm not sure about enabling the NormalizeMarkup MRF just yet, as it hasn't been updated in years and probably needs a guard on object type.

  • Status content already gets sanitized by StatusView before it gets served through the API.
  • Chat messages already get sanitized by the Validator.

We should probably move sanitization code to the validators, get rid of the MRF, and don't sanitize things twice in StatusView. That would boost performance ever so slightly.

Edited by Alex Gleason

Merge request reports