Duplicate Image not being shown when editing a post

Kirby

Well-known member
Affected version
2.0 Beta 1
Steps to reproduce
  1. Configure a HTTPS server with header Content-Security-Policy: block-all-mixed-content
  2. Enable Image Proxy
  3. Create a post with a image hosted on a non-secure server
  4. Verify that it is being displayed and that the site is sill secure
  5. Edit the post
Expected Result
The image is being shown

Actual Result
The image is not being shown as the HTML in the editor contains the orginal image URL and not the proxy url and thus is blocked.
A website without Content-Security-Policy: block-all-mixed-content (like xenforo.com) loses the padlock as soon as the editor has been loaded.
 
While this is certainly true, the same issue exists in XF1, and resolving it would involve significant alterations to the RTE, which isn't in scope right now, so I will mark this for attention in a future version, because for now it mostly works.
 
Somewhat disappointing, but it's definitly not a showstopper.
I've done this on vBulletin/phpBB as an Add-on (using camo as image proxy) so I think that should be doable on XF as well if users start to complain :)
 
Top Bottom