When a code block contains syntax for an image, lemmy seems to replace the image’s url with a proxied one.

This instance’s web UI’s preview displays the original url correctly. The proxied url is also distributed trough federation, so users on other instances or for example Piefed should also see the lemmy.ml url in the example below.

This behavior is unexpected, as the contents of a code block should not be parsed as markdown, and thus no image should be displayed and no requests to the server should be made.

Example: I entered “https://media.piefed.zip/posts/bT/UD/bTUDGZRAcKZdXyO.png” as the url in the following code block in the web UI: ![alt text](https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Fmedia.piefed.zip%2Fposts%2FbT%2FUD%2FbTUDGZRAcKZdXyO.png)

Lemmy UI version: 0.19.17
Lemmy backend version: 0.19.18-beta.0

  • ferric_carcinization@lemmy.mlOP
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    8 hours ago

    Does it really help that much? It’s trivial to reverse and no requests are made to the server, by clients or instances, if it’s in a code block.

    Either way, this seems non-obvious and I can’t remember seeing it documented anywhere.