Cache onebox images and/or serve them from the main domain

[Falco]

@max.l

Onebox favicons and preview images still get fetched from the remote server which allows that server to track which user opens threads

Let’s test it live

“It doesn't feel safe”—Many international game developers plan to skip GDC in US

It does initially loads from the remote website, what happens after submission?

Everything is being loaded from our Discourse Meta CDN, as expected. I don’t see any issues here @max.l. Are you seeing anything different from this test?

[max.l]

Ok, I got confused by the fact that in the editor preview it loads the images directly from the remote website, but in the final post it doesn’t anymore. Granted this at least solves part of the issue but my understanding is that even that would be a GDPR violation as the image is loaded on the website. (Using 2026.3.0-latest ( c682292a4c ))

Also as far as I can tell that change is not easily applied retroactively, I assume one would need to rebake all posts? :S

[Falco]

@max.l

I assume one would need to rebake all posts? :S

Only posts with oneboxes right? And only oneboxes who don’t load in iframes by default, YouTube oneboxes can be skipped for example.

@max.l

Ok, I got confused by the fact that in the editor preview it loads the images directly from the remote website, but in the final post it doesn’t anymore.

Yes, we solved this quite some time ago.

@max.l

Granted this at least solves part of the issue but my understanding is that even that would be a GDPR violation as the image is loaded on the website.

IANAL, so can’t really help there. But if the user is sharing a link to website, like Ars in my example, that means the user already visited that site to get the link? And it won’t load the image from the third party for anyone else right ?