Allow embedding XKCD panes in Remarkup
Open, Needs TriagePublic

Description

Just dumping the image looses the alt-text, and that's at least 35% of the thing.

avivey created this task.Jun 10 2016, 12:05 AM

Looks like there's a JSON API: https://xkcd.com/json.html

I don't want to enable this by default because of referrer-leakage issues before T4190, but it could come upstream after T4190 or be an extension now/properly after T5055.

Silly question but can't we use CSP Level 2's referrer directive (https://www.w3.org/TR/CSP11/#directive-referrer) to avoid leaking information without the need to build full image proxying?
If that doesn't work can we use <iframe seamless referrerpolicy="no-referrer"> ?

Silly question but can't we use CSP Level 2's referrer directive (https://www.w3.org/TR/CSP11/#directive-referrer) to avoid leaking information without the need to build full image proxying?
If that doesn't work can we use <iframe seamless referrerpolicy="no-referrer"> ?

this might also allow the removal of the config setting to enable youtube in remarkup.

eadler added a project: Restricted Project.Aug 7 2016, 7:59 PM
chad moved this task from Backlog to Tomfoolery on the Remarkup board.Mar 27 2017, 4:01 PM
anda added a subscriber: anda.Jul 4 2017, 1:28 PM