search

overte-org / overte

Overte open source virtual worlds platform.
https://overte.org/
Other
151 stars 51 forks source link

Web entity URL whitelisting for users #250

Open akamicah opened 2 years ago

akamicah commented 2 years ago

To prevent abuse, and to prevent users being exposed to sites or content they do not wish to be exposed to, web-entities in world should ask for the user's permission to download from the web entity's URL, providing a whitelist functionality.

For example, user enters world, web entity is showing a YouTube video, user is presented with a dialog asking for permission to whitelist domain https://youtube.com before web entity displays the YouTube video. If declined, a placeholder will appear on the web entity showing that it's being blacklisted - if the user then clicks the web entity, it will present the same dialog again allowing them to whitelist.

ksuprynowicz commented 2 years ago

A whitelist popup could have an explanation for it, and also information about create rights on a given world (worlds with create rights given to everyone might be less safe than curated one).

AleziaKurdis commented 1 year ago

When it comes from a domain, it should be white listed by default , otherwise visitor will kinda destroy the setup before even have seen it. It make a bit pointless to build anything.