# Public posts contain secure upload urls for non-secure uploads

**URL:** <https://meta.discourse.org/t/public-posts-contain-secure-upload-urls-for-non-secure-uploads/259087>\
**Category:** Bug\
**Created:** [March 22, 2023, 9:39pm UTC](https://meta.discourse.org/t/public-posts-contain-secure-upload-urls-for-non-secure-uploads/259087 "2023-03-22T21:39:33Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![martin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/martin/32/491371_2.png) [@martin](https://meta.discourse.org/u/martin)\
**Post date:** [March 23, 2023, 2:36am UTC](https://meta.discourse.org/t/public-posts-contain-secure-upload-urls-for-non-secure-uploads/259087/3 "2023-03-23T02:36:27Z")

</div>

> [@sam](#):
>
> everything should be secured including public posts

The rules are:

1. If `login_required`, everything is marked secure except for public things like site logos, emoji etc.
2. If it is not, then only uploads in PMs or secure categories are marked secure

> [@Wolftallemo](#):
>
> A lot of recent posts seem to have uploads with secure upload urls in them despite the uploads themselves not being marked as secure

I would need to see some examples of this, is it possible that the image URL has just been copied from another post into a new one? I haven’t seen this behaviour before of something getting a secure URL without the underlying upload being secure.

---

_[View the full topic](https://meta.discourse.org/t/public-posts-contain-secure-upload-urls-for-non-secure-uploads/259087)._