Ralf Haferkamp
Ralf Haferkamp
Here's some info about what github is doing https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/about-anonymized-urls For proxying the image downloads they're apparently using https://github.com/atmos/camo (archived since 2021 🤷♂)
> Ok, replacing the markdown with a request to the opencloud domain removes the necessity for a CSP rule. But it kind of defeats the purpose of having CSP rules...
Yeah, that certain looks like a bug. I'll move this to the backend repo...
I'd consider this a Prio 2 issue for now as multi-tenancy is not yet a production feature.
This is the list of formats supported by go-vips currently: https://github.com/davidbyttow/govips/blob/36797d897bb01ecae630eafe0a2d1ce9ee3dbade/vips/foreign.go#L151 I guess we should add all of them. IIRC the main problem is we current have a hardcoded list...
> [@rhafer](https://github.com/rhafer) do you know if we can just enable support for SVG in libvips? Documentation reads like SVGs have special handling in libvips, so it would be more effort....
I am not sure what you mean with "completely offline" here. Maybe you want to elaborate on that a bit? Probably it's just a misunderstand in what you want to...
> Furthermore, if I add an alias like `opencloud.example.com` to my reverse proxy, so the traffic will flow like `opencloud service -> reverse proxy (internal) -> another opencloud service` and...
Testing a fix in https://github.com/opencloud-eu/opencloud/pull/1868