Open teodor-stoenescu opened 7 years ago
Currently, an URL of an externaly hosted image is required. We could implement au upload service for user images.
I would argue that hotlinking is really unsafe and unethical. On the one hand you are using someone else's bandwidth. While this may not be a problem today, it could lead to other unexpected behaviours, like the image not being accessible in certain network configurations (such as accessing the platform via VPN). On the other hand this leaks information outside the platform, like who has access to certain projects. Last but not least, hotlinking opens a door for third parties to potentially deliver XSS exploits.
As seen below, the project image field is a text field. It would make more sense for it to be a file field. This way the user can upload his own project image file.