1. The sanitizer strips "data:", so we need to fix/make that configurable 2. Yes, we can make that configurable too
Cheers, Dave On Sat, Oct 3, 2026 at 5:10 PM Richard via user <[email protected]> wrote: > Hi Dave -- > > Thanks for your response! Had a couple questions: > > 1. On my 6.1.6 instance, I added "data:" (less the quotes) to the img- > src directive but the images still don't display. Is it enough to > change that directive to get existing base64 images to display? > > 2. Can your proposed 60k byte limit be configurable? Many of our > images are larger than that in base64. > > Best, > Richard > > > > I did not actually know that copy-and-paste image was a feature of > > the > > Summernote rich-text editor that we use in Roller. > > > > I think we can fix this by: > > - Turning copy-and-pasted images into media file uploads at entry > > save time > > - Adding an option to allow inline images in posts, for the case > > where > > uploads are disabled > > > > Tracking this as https://issues.apache.org/jira/browse/ROL-2184 > > > > Dave > > > > > > On Fri, Oct 2, 2026 at 4:17 PM Richard via user > > <[email protected]> > > wrote: > > > > > Adding more observations. The issue seems to be due to how the > > > images > > > were originally "pasted" into the Roller editor. Based on the > > > Roller > > > editor's Code View </> button we can see that: > > > > > > Method 1. The user drags an image from another browser window into > > > the > > > Roller editor. This creates an embedded remote URL which works > > > fine > > > when the blog entry is published. > > > > > > Method 2. The user drags an image located on the local desktop > > > into > > > the Roller editor. This creates a base64 version of the image > > > which > > > does not render when published. > > > > > > When viewing the page source of the published blog entry using > > > Method > > > 2, the image reference/data is simply no longer there -- it's been > > > stripped out. > > > > > > So one workaround would be to replace any base64 images with links > > > but > > > that's not ideal. Is it possible that some of the latest security > > > enhancements are preventing base64 images from being published? > > > > > > > > > > > > On Thu, 2026-10-01 at 18:19 -0400, Richard via user wrote: > > > > Hello -- > > > > > > > > After an upgrade to 6.1.6, images that authors copy/pasted > > > > directly > > > > into the text of a blog entry (instead of embedding as a media > > > > resource) no longer display. Is this expected based on the > > > > latest > > > > changes and if so, is there any workaround? > > > > > > > > Images pasted in this way are still available when an author > > > > edits > > > > the > > > > post. > > > > > > > > Thanks, > > > > Richard > > > >
