Hide or mask images embedded in HTML #539

Open
evanp opened this Issue Apr 3, 2013 · 1 comment

Comments

Projects
None yet
3 participants
@evanp
Contributor

evanp commented Apr 3, 2013

Images embedded in the HTML with a src on another server can give a poor experience if that server goes down. They can also be a privacy threat, using third-party cookies or IP logging to track remote users.

I see a couple of options here:

  1. Replace images in content with proxy URLs, as we do with images outside of HTML content.
  2. Hide images until a user clicks a "show images" link. I think email systems do this quite a bit.

There might be other options.

@larjona larjona added the webui label Mar 17, 2016

@strugee

This comment has been minimized.

Show comment
Hide comment
@strugee

strugee Jan 19, 2017

Member

We should proxy URLs. That'll provide a more reliable experience if a remote server goes down, it avoids leaking metadata and it will also fix passive mixed content issues.

Member

strugee commented Jan 19, 2017

We should proxy URLs. That'll provide a more reliable experience if a remote server goes down, it avoids leaking metadata and it will also fix passive mixed content issues.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment