26
Bug: Lemmy replaces direct image url with a proxied one in preformatted blocks (lemmy.ml)
submitted 7 months ago by to c/lemmy@lemmy.ml
6 comments fedilink hide all child comments
 

When a code block contains syntax for an image, lemmy seems to replace the image's url with a proxied one.

This instance's web UI's preview displays the original url correctly. The proxied url is also distributed trough federation, so users on other instances or for example Piefed should also see the lemmy.ml url in the example below.

This behavior is unexpected, as the contents of a code block should not be parsed as markdown, and thus no image should be displayed and no requests to the server should be made.

Example: I entered "https://media.piefed.zip/posts/bT/UD/bTUDGZRAcKZdXyO.png" as the url in the following code block in the web UI: ![alt text](https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Fmedia.piefed.zip%2Fposts%2FbT%2FUD%2FbTUDGZRAcKZdXyO.png)

Lemmy UI version: 0.19.17
Lemmy backend version: 0.19.18-beta.0

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 7 months ago (5 children)

This is a feature. As instance owners when people started posting CP and other horrendous shit we needed something to be able to turn it off ourselves, even if another site or instance was hosting it. If someone posts even markdown with it, we are still in the eyes if governments hosting it, and thus liable.

  • permalink
  • fedilink
  • source
  • hideshow 5 child comments
    •
  • [–] [S] 1 point 7 months ago (4 children)

    Does it really help that much? It's trivial to reverse and no requests are made to the server, by clients or instances, if it's in a code block.

    Either way, this seems non-obvious and I can't remember seeing it documented anywhere.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 4 points 7 months ago* (3 children)

    Yes it does.

    Release notes

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] [S] 2 points 7 months ago (2 children)

    That doesn't explain why urls in code blocks are rewriten as well. When the image is surrounded by backticks, it shouldn't be parsed but rather displayed verbatim as the code block's content.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •