Codimd: photo pasting glitch (or feature)

[racterub]

Hi, idk I should use mandarin or english here :/

I've encounter a glitch which occurs when I tried to paste on codimd.
While pasting images, codimd will also paste the photo original urls, but hackmd won't.
I don't know this is a feature or a bug, but it's kind of annoying 😅

Here's the screenshot of hackmd and codimd:

[racterub]

Hmm
After restarting server, it disappeared :/

[racterub]

OK, I found out there's some difference whhile pasting images

Sample 1 (without pasting url):
https://blog.racterub.io/logo.jpg
Sample 2 (with pasting url):
https://www.lifewire.com/thmb/Oyf1CbS_zWEFiDM16pGudIZc3XE=/768x0/filters:no_upscale():max_bytes(150000):strip_icc():format(webp)/Simpsons_09_Homer_V2F_hires1-56e1eccc5f9b5854a9f89a63.jpg

If you test on codimd, this will have different result.

[SISheogorath]

Let's ask thr important question: Do you think we should change the current behavior of CodiMD to provide images/media from the CodiMD URL and proxy it through our service or do you think we should use the original URL.

Technically speaking proxying the media would have an actual security benefit as we can tighten the CSPs for media. But at the same time would increase the usage of the service and maybe cause problems with express on high load.

Can't say for sure what was the idea behind it for HackMD but it seems like their intention begin it is to convert it to WebP which is a new picture format "standard".

So what do you think? Should we as CodiMD change the behavior? When you want HackMD to switch back, then your request should go to https://github.com/hackmdio/hackmd-io-issues

[racterub]

Answer: We should use the original url.

After reading your comments I realize the reason about this issue is the way I'm using it,
I should use markdown to attach the existed images on the web :/ .

[ccoenen]

If I paste a URL, I wouldn't expect CodiMD messing with it. At least not automatically.

[SISheogorath]

GitHub for example proxies all embedded pictures to prevent user tracking and similar