What’s the suggested method to use secure images on Discourse in a self-hosted instance? I’m using Discourse Encrypt and I managing the CSP directives by my own.

Here’s how to do it: https://meta.discourse.org/t/secure-uploads/meta/140017

Thanks! But I’m not using S3 and I’m asking about the CSP policies that seems to be totally different to the topic linked.

If your desire is for images not to be available to anyone with the image url, then you have to use aws S3 as described in that topic. As it is image urls are fairly hard to guess, so they are pretty secure. I don’t believe that Discourse encrypt makes uploads secure.

[صورة] Jay Pfaffman: I don’t believe that Discourse encrypt makes uploads secure. It can encrypt uploads in PMs.

Well, shows what I know! What does it do, embed them in the text in the message? I’ve been meaning to check it out. So what’s the answer to the OP?

[صورة] Jay Pfaffman: So what’s the answer to the OP? Maybe I didn’t detail in a proper way my question. I have an issue setting up Encrypt Personal Messages because img-src plus default-src CSP directives (disabled from Discourse management for enable this plugin). I suspect there is somethi…

ما هي الطريقة المقترحة لاستخدام الصور الآمنة؟

الدعم

supermathie (Michael Brown) 14 يونيو 2023، 11:41م 5

يمكنه تشفير التحميلات في الرسائل الخاصة.

الموضوع		الردود	مرات العرض
Spammers using uploaded images in spam e-mails. Any advice how to resolve? Support	9	535	17 يونيو 2024
Secure Uploads Announcements secure-uploads	43	18486	24 يوليو 2025
Personal Message attachments accessible to unauthenticated users (missing auth check) Support secure-uploads , personal-messages	1	165	8 يوليو 2025
S3 Bucket objects restricted access policy as per Discourses groups Support	2	942	1 أكتوبر 2021
Are the images published in the Staff category publicly visible? Support secure-uploads	2	139	28 نوفمبر 2025

ما هي الطريقة المقترحة لاستخدام الصور الآمنة؟

الموضوعات ذات الصلة