If you set a URL outside of Lemmygrad as an image, it no longer hotlinks the image.
I’m guessing as a security measure, so people can’t send your browser to a random site via a link.
Can you explain more? Like what it is you are doing, what you expect to happen and what actually happens?
Example: https://lemmygrad.ml/post/4914152
Expected outcome: Lemmygrad hotlinks the image, shows it on side
Actual outcome: Lemmygrad shows a 404 image
UPDATE: Lemmygrad no longer renders images over HTTP.
It’s probably a privacy respecting measure from the recent update. If lemmy hotlinks images or anything in general, there is a chance that your IP is leaked to the server being hotlinked to.
Now images are proxied through the lemmy instance.
works for me with unprotected links (shitflare, etc links not so much)
a 404 in this case probably indicates the proxy is being blocked by the content server itself. can’t blame lemmy for that.
I think maybe it doesn’t work on embedded images in posts and comments yet. But I’ve not been following lemmy development closely so don’t take my word for it.
Does the image load in my previous comment? That’s a markdown url link. I tried it with an image from a cloudflared website, one from reuters.com and one from antiwar.com and only the unprotected antiwar.com image would load.
I’ve never looked at the lemmy code, but if I had to wager an irresponsibly wild guess… there’s probably a curl request in there and the useragent is getting blocked by some CDNs.
I don’t think it’s that. Like this image from Reuters served by Cloudflare works:
On the other hand if you try to embed an image served on Reuter’s /resizer/ endpoint it won’t work embedded since they have some authentication process for it.
I don’t think embedded images are being proxied through Lemmy. It’s likely the browser trying to fetch the images directly which fails in some cases.
Edit:
Does the image load in my previous comment?
Yeah it does.
