Option to prohibit avatars from insecure sites

https://www.phpbb.com/ideas/
Post Reply
Author:
Drakath
Posted:
Sat Apr 21, 2018 12:11 pm
Rating:
Status:
New
Drakath
Registered User
Posts: 104
Joined: Wed Aug 29, 2012 12:17 pm

Option to prohibit avatars from insecure sites

Post by Drakath » Sat Apr 21, 2018 12:11 pm

There should be an option to only allow HTTPS avatars when using remote links in order to prevent mixed content warnings.

User avatar
vader696
Translator
Posts: 72
Joined: Sat Jan 21, 2017 11:38 am
Location: Krakow, Poland
Contact:

Re: Option to prohibit avatars from insecure sites

Post by vader696 » Fri Apr 27, 2018 11:24 am

In this case you should disallow any content from websites which are use http, eg. enclosed links from other sites, not only avatars.

In my opinion just disallow option to use avatars from other websites or add point to your forum regulations.

User avatar
jackennils
Registered User
Posts: 198
Joined: Mon Jun 01, 2009 7:48 pm

Re: Option to prohibit avatars from insecure sites

Post by jackennils » Sun May 06, 2018 2:29 pm

Exactly. Just let people upload the avatars to your site and you're done.

Wes of StarArmy
Registered User
Posts: 288
Joined: Fri Mar 04, 2005 2:59 am
Location: StarArmy.com
Contact:

Re: Option to prohibit avatars from insecure sites

Post by Wes of StarArmy » Thu May 10, 2018 2:41 pm

Wouldn't it make more sense to proxy the images on the forum?

A proxied image would look something like:

Code: Select all

https://example.com/phpbb/proxy.php?url=http://some.insecure.site/avatarimage.jpg
I agree that allowing avatars to be uploaded is the easiest fix.

paul7289
Registered User
Posts: 5
Joined: Fri May 18, 2018 1:03 pm
Contact:

Re: Option to prohibit avatars from insecure sites

Post by paul7289 » Fri May 18, 2018 1:20 pm

Wes of StarArmy wrote:
Thu May 10, 2018 2:41 pm
Wouldn't it make more sense to proxy the images on the forum?

A proxied image would look something like:

Code: Select all

https://example.com/phpbb/proxy.php?url=http://some.insecure.site/avatarimage.jpg
I agree that allowing avatars to be uploaded is the easiest fix.
That's a nice workaround. So you could allow uploading avatars and will not have any problems with the SSL.

Drakath
Registered User
Posts: 104
Joined: Wed Aug 29, 2012 12:17 pm

Re: Option to prohibit avatars from insecure sites

Post by Drakath » Sat Apr 27, 2019 8:44 am

Setting up a proxy server is not always an option for some people. Uploading avatars is also not a solution that will always satisfy everyone since some board owners (especially ones who host their sites in Europe) are concerned about possible copyright implications due to hosting these images.

Drakath
Registered User
Posts: 104
Joined: Wed Aug 29, 2012 12:17 pm

Re: Option to prohibit avatars from insecure sites

Post by Drakath » Sat Apr 27, 2019 8:48 am

vader696 wrote:
Fri Apr 27, 2018 11:24 am
In this case you should disallow any content from websites which are use http, eg. enclosed links from other sites, not only avatars.
Disallowing http in BBCode is already possible with an extension, hence I did not mention it in this topic. As for avatars, the only option currently is disabling remote avatars. I already mentioned why that is not a perfect solution, in addition remote avatars can in some cases be dynamic which is not possible with uploaded ones.
Last edited by Drakath on Sat Apr 27, 2019 9:05 am, edited 1 time in total.

User avatar
david63
Registered User
Posts: 15931
Joined: Thu Dec 19, 2002 8:08 am
Location: Lancashire, UK
Name: David Wood
Contact:

Re: Option to prohibit avatars from insecure sites

Post by david63 » Sat Apr 27, 2019 8:51 am

Drakath wrote:
Sat Apr 27, 2019 8:44 am
some board owners (especially ones who host their sites in Europe) are concerned about possible copyright implications due to hosting these images.
If you are referring to the upcoming EU regulation then that is not a problem as the likes of avatars are specifically excluded.
David
Remember: You only know what you know and - you don't know what you don't know!
My CDB Contributions | How to install an extension
I will not be accepting translations for any of my extensions in Github - please post any translations in the appropriate topic.
No support requests via PM or email as they will be ignored

Drakath
Registered User
Posts: 104
Joined: Wed Aug 29, 2012 12:17 pm

Re: Option to prohibit avatars from insecure sites

Post by Drakath » Sat Apr 27, 2019 8:58 am

david63 wrote:
Sat Apr 27, 2019 8:51 am
If you are referring to the upcoming EU regulation then that is not a problem as the likes of avatars are specifically excluded.
Could you provide the source of this information?

User avatar
david63
Registered User
Posts: 15931
Joined: Thu Dec 19, 2002 8:08 am
Location: Lancashire, UK
Name: David Wood
Contact:

Re: Option to prohibit avatars from insecure sites

Post by david63 » Sat Apr 27, 2019 9:46 am

One of many
Your memes will be safe. The good news is that memes will not be banned, and will be allowed alongside quotation, criticism, review, caricature, parody and pastiche (like GIFs) will be specifically allowed.”
Source: https://www.telegraph.co.uk/technology/ ... directive/

A Google search will show many more the same
David
Remember: You only know what you know and - you don't know what you don't know!
My CDB Contributions | How to install an extension
I will not be accepting translations for any of my extensions in Github - please post any translations in the appropriate topic.
No support requests via PM or email as they will be ignored

Drakath
Registered User
Posts: 104
Joined: Wed Aug 29, 2012 12:17 pm

Re: Option to prohibit avatars from insecure sites

Post by Drakath » Sat Apr 27, 2019 9:56 am

david63 wrote:
Sat Apr 27, 2019 9:46 am
One of many
Your memes will be safe. The good news is that memes will not be banned, and will be allowed alongside quotation, criticism, review, caricature, parody and pastiche (like GIFs) will be specifically allowed.”
Source: https://www.telegraph.co.uk/technology/ ... directive/

A Google search will show many more the same

And what defines an avatar? In which category does it fall?

Post Reply

Return to “phpBB Ideas”