💬 Replied to: The security risk of embedding images from external sites
“On a lot of IndieWeb sites, I noticed that profile images of webmentions get directly embedded from their original source. For example, Twitter profile images are loaded directly from Twitter servers (pbs.twimg.com) or even my profile image is directly embedded from my site.
However you should consi…”
It’s definitely something to think about. I use the Avatar Privacy plugin to mitigate a similar concern with Gravatar images, by caching them on my server… I should look at whether I can extend this to include all user images.