emencia / django-blog-lotus

A weblog application with Django.
https://django-blog-lotus.readthedocs.io/
MIT License
5 stars 1 forks source link

Images from non public articles should be protected #36

Open sveetch opened 2 years ago

sveetch commented 2 years ago

Is your feature request related to a problem? Please describe. Currently image from draft/private/non published are just reachable from anyone that know its link.

Although it is planned to hash media filename, which will make it impossible to guess, this is not a solution since the link can still be shared or used elsewhere.

Describe the solution you'd like Media from non public articles should be protected. The more obvious solution is to implement the common "sendfile" method for webservers, like with django-sendfile2