Only allow uploaded images to display

[habboubih83]

Hello,

I've just implemented SSL to my forums. However, inserting an external image to the post will defeat the purpose of the secured connection.

My question is how can I allow only internal images (uploaded to attachments) to be displayed in the post without having to disable the IMG BB code?

[noypiscripter]

You can add this meta tag in the head to block external images using http

<meta http-equiv="Content-Security-Policy" content="block-all-mixed-content" />

I added that on my site. I also use CloudFlare to enable "Automatic HTTPS Rewrites" option which helps fix mixed content by changing "http" to "https" for all resources or links on your web site that can be served with HTTPS.

[habboubih83]

Originally Posted by noypiscripter

You can add this meta tag in the head to block external images using http

<meta http-equiv="Content-Security-Policy" content="block-all-mixed-content" />

I added that on my site. I also use CloudFlare to enable "Automatic HTTPS Rewrites" option which helps fix mixed content by changing "http" to "https" for all resources or links on your web site that can be served with HTTPS.

This will block external CSS and JS files.

[noypiscripter]

External css and js files should be using https or they will not work anyway.

Only those using http will be blocked. And that will keep the ssl lock icon in the browser green even if you have mixed content.