# Public posts contain secure upload urls for non-secure uploads

**URL:** <https://meta.discourse.org/t/public-posts-contain-secure-upload-urls-for-non-secure-uploads/259087>\
**Category:** Bug\
**Created:** [March 22, 2023, 9:39pm UTC](https://meta.discourse.org/t/public-posts-contain-secure-upload-urls-for-non-secure-uploads/259087 "2023-03-22T21:39:33Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![Wolftallemo](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/wolftallemo/32/289645_2.png) [@Wolftallemo](https://meta.discourse.org/u/Wolftallemo)\
**Post date:** [March 23, 2023, 3:37am UTC](https://meta.discourse.org/t/public-posts-contain-secure-upload-urls-for-non-secure-uploads/259087/4 "2023-03-23T03:37:20Z")

</div>

This was one I found (to my knowledge none of the images were hotlinked)

 ![image](https://global.discourse-cdn.com/meta/original/4X/6/0/f/60fb6e674376a3f4b8e57b737aaca28a633782f3.jpeg)

The top image does not have a secure link, but all of the others do (although it gets negated by the public read acl). I’ve noticed that on every other affected post, it’s always the first image that is fine but not the others (posts with only one image are unaffected)

---

_[View the full topic](https://meta.discourse.org/t/public-posts-contain-secure-upload-urls-for-non-secure-uploads/259087)._
