"Restrict images to this site" restricts images that, by definition, *are* on this site.

Created on 8 September 2018, about 6 years ago
Updated 17 March 2024, 8 months ago

Problem/Motivation

Local SVGs are blocked when 'Restrict images to this site' is enabled for selected text format and result in broken SVG (/core/misc/icons/e32700/error.svg) with alt as "This image has been removed. For security reasons, only images from the local domain are allowed.".

Steps to reproduce

1. Create a custom block with basic HTML text format
2. Add an SVG image eg. <img src="/core/misc/logo/drupal-logo.svg" />

Expected result:
SVG displays properly

Actual result
Broken SVG (/core/misc/icons/e32700/error.svg) is displayed with alt as "This image has been removed. For security reasons, only images from the local domain are allowed.".

Proposed resolution

Allow local SVGs to be displayed in _filter_html_image_secure_process

Remaining tasks



Code review
Commit

User interface changes

None

API changes

None

Data model changes

None

Release notes snippet

None

πŸ› Bug report
Status

Needs work

Version

11.0 πŸ”₯

Component
FilterΒ  β†’

Last updated 3 days ago

No maintainer
Created by

πŸ‡ΊπŸ‡ΈUnited States Ben Coleman

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024