From 398d301ecefefb863d937d1217528be98f0c603f Mon Sep 17 00:00:00 2001 From: Aevann Date: Thu, 14 Sep 2023 23:05:24 +0300 Subject: [PATCH] remove raw.githubusercontent.com from approved_embed_hosts, repos get deleted and we'd end up with broken images --- files/helpers/config/const.py | 1 - 1 file changed, 1 deletion(-) diff --git a/files/helpers/config/const.py b/files/helpers/config/const.py index 827cbd48c..6f382f417 100644 --- a/files/helpers/config/const.py +++ b/files/helpers/config/const.py @@ -966,7 +966,6 @@ approved_embed_hosts = [ '66.media.tumblr.com', '78.media.tumblr.com', 'i.ytimg.com/vi', - 'raw.githubusercontent.com', # using repos as media sources. no obvious exploit ] if SITE_IMAGES not in approved_embed_hosts: