"Restrict images to this site" restricts images that, by definition, *are* on this site.

Created on 8 September 2018, over 6 years ago
Updated 17 March 2024, about 1 year ago

Problem/Motivation

Local SVGs are blocked when 'Restrict images to this site' is enabled for selected text format and result in broken SVG (/core/misc/icons/e32700/error.svg) with alt as "This image has been removed. For security reasons, only images from the local domain are allowed.".

Steps to reproduce

1. Create a custom block with basic HTML text format
2. Add an SVG image eg. <img src="/core/misc/logo/drupal-logo.svg" />

Expected result:
SVG displays properly

Actual result
Broken SVG (/core/misc/icons/e32700/error.svg) is displayed with alt as "This image has been removed. For security reasons, only images from the local domain are allowed.".

Proposed resolution

Allow local SVGs to be displayed in _filter_html_image_secure_process

Remaining tasks



Code review
Commit

User interface changes

None

API changes

None

Data model changes

None

Release notes snippet

None

πŸ› Bug report
Status

Needs work

Version

11.0 πŸ”₯

Component
FilterΒ  β†’

Last updated 10 days ago

No maintainer
Created by

πŸ‡ΊπŸ‡ΈUnited States ben coleman

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024