Skip to main content
edited title
Link

Allowing images from external sources opens doors to serious security exploits and privacy risks

Notice removed Authoritative reference needed by CommunityBot
Bounty Ended with no winning answer by CommunityBot
Question Protected by CommunityBot
Notice added Authoritative reference needed by rydwolf
Bounty Started worth 200 reputation by rydwolf
This person made it clear he doesn't want to be recognized any longer.
Source Link
Shadow Wizard
  • 175k
  • 33
  • 437
  • 863

Note: Please see Jeremy's answerthis answer for more info on how this poses a security risk.

I'm sure you guys already know this, but allowing users to put images from any source in questions means that askers can get all the analytical data you can about their question.

So a malicious user could theoretically post some posts and such with a small 1x1 image, which would allow him to get users IP addresses (thus general location/even workplace), exact times people visited his question, et cetera.

Maybe you don't care—such information isn't that revealing. However, some users might not feel the same.

(Suggested fix: only allow images from a list of image hosting sites you can vouch for.)

Note: Please see Jeremy's answer for more info on how this poses a security risk.

I'm sure you guys already know this, but allowing users to put images from any source in questions means that askers can get all the analytical data you can about their question.

So a malicious user could theoretically post some posts and such with a small 1x1 image, which would allow him to get users IP addresses (thus general location/even workplace), exact times people visited his question, et cetera.

Maybe you don't care—such information isn't that revealing. However, some users might not feel the same.

(Suggested fix: only allow images from a list of image hosting sites you can vouch for.)

Note: Please see this answer for more info on how this poses a security risk.

I'm sure you guys already know this, but allowing users to put images from any source in questions means that askers can get all the analytical data you can about their question.

So a malicious user could theoretically post some posts and such with a small 1x1 image, which would allow him to get users IP addresses (thus general location/even workplace), exact times people visited his question, et cetera.

Maybe you don't care—such information isn't that revealing. However, some users might not feel the same.

(Suggested fix: only allow images from a list of image hosting sites you can vouch for.)

Notice removed Draw attention by CommunityBot
Bounty Ended with no winning answer by CommunityBot
edited tags; edited title; added 89 characters in body
Source Link

External Allowing images in posts are a privacy and abuse threatfrom external sources opens doors to serious security exploits

Note: Please see Jeremy's answer for more info on how this poses a security risk.

I'm sure you guys already know this, but allowing users to put images from any source in questions means that askers can get all the analytical data you can about their question.

So a malicious user could theoretically post some posts and such with a small 1x1 image, which would allow him to get users IP addresses (thus general location/even workplace), exact times people visited his question, et cetera.

Maybe you don't care—such information isn't that revealing. However, some users might not feel the same.

(Suggested fix: only allow images from a list of image hosting sites you can vouch for.)

External images in posts are a privacy and abuse threat

I'm sure you guys already know this, but allowing users to put images from any source in questions means that askers can get all the analytical data you can about their question.

So a malicious user could theoretically post some posts and such with a small 1x1 image, which would allow him to get users IP addresses (thus general location/even workplace), exact times people visited his question, et cetera.

Maybe you don't care—such information isn't that revealing. However, some users might not feel the same.

(Suggested fix: only allow images from a list of image hosting sites you can vouch for.)

Allowing images from external sources opens doors to serious security exploits

Note: Please see Jeremy's answer for more info on how this poses a security risk.

I'm sure you guys already know this, but allowing users to put images from any source in questions means that askers can get all the analytical data you can about their question.

So a malicious user could theoretically post some posts and such with a small 1x1 image, which would allow him to get users IP addresses (thus general location/even workplace), exact times people visited his question, et cetera.

Maybe you don't care—such information isn't that revealing. However, some users might not feel the same.

(Suggested fix: only allow images from a list of image hosting sites you can vouch for.)

Notice added Draw attention by Jeremy
Bounty Started worth 400 reputation by Jeremy
Notice removed Draw attention by CommunityBot
Bounty Ended with Laurel's answer chosen by CommunityBot
Notice added Draw attention by Jeremy
Bounty Started worth 200 reputation by Jeremy
edited title
Link
Jeremy
  • 23.7k
  • 7
  • 110
  • 206
Loading
edited tags
Link
Jeff Atwood
  • 311.4k
  • 107
  • 889
  • 1.3k
Loading
edited tags
Link
Gelatin
  • 9.3k
  • 2
  • 39
  • 56
Loading
edited title
Link
Earlz
  • 14.3k
  • 5
  • 48
  • 77
Loading
Source Link
Aaron Yodaiken
  • 1.3k
  • 1
  • 8
  • 6
Loading