Changes between Initial Version and Version 1 of Ticket #11773, comment 10
- Timestamp:
- Feb 25, 2015, 10:37:03 PM (8 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
Ticket #11773, comment 10
initial v1 1 So actually adding it to safe_schemeswould be an error. But this does not affect this here, as it refers only to images. I can imagine, that data usage can cause a lot of issues in many places, so I would not propose it to allow it everywhere (without checking first). But also beside images I don't see much gain anyway. CSS and JavaScript are plaintext and can be embedded directly. Other formats like video and sound are usually to large to embed. Only (small) images are an proper use-case. And actually that's also the only places were I have seen it till now and where we use it.1 So actually adding it to `safe_schemes` would be an error. But this does not affect this here, as it refers only to images. I can imagine, that data usage can cause a lot of issues in many places, so I would not propose it to allow it everywhere (without checking first). But also beside images I don't see much gain anyway. CSS and JavaScript are plaintext and can be embedded directly. Other formats like video and sound are usually to large to embed. Only (small) images are an proper use-case. And actually that's also the only places were I have seen it till now and where we use it.