Wonderful!  Much appreciated - thank you, Dave.

On Sat, 2026-10-03 at 17:20 -0400, Dave wrote:
> 1. The sanitizer strips "data:", so we need to fix/make that
> configurable
> 2. Yes, we can make that configurable too
> 
> Cheers,
> Dave
> 
> On Sat, Oct 3, 2026 at 5:10 PM Richard via user
> <[email protected]>
> wrote:
> 
> > Hi Dave --
> > 
> > Thanks for your response!  Had a couple questions:
> > 
> > 1.  On my 6.1.6 instance, I added "data:" (less the quotes) to the
> > img-
> > src directive but the images still don't display.  Is it enough to
> > change that directive to get existing base64 images to display?
> > 
> > 2.  Can your proposed 60k byte limit be configurable?  Many of our
> > images are larger than that in base64.
> > 
> > Best,
> > Richard
> > 
> > 
> > > I did not actually know that copy-and-paste image was a feature
> > > of
> > > the
> > > Summernote rich-text editor that we use in Roller.
> > > 
> > > I think we can fix this by:
> > > - Turning copy-and-pasted images into media file uploads at entry
> > > save time
> > > - Adding an option to allow inline images in posts, for the case
> > > where
> > > uploads are disabled
> > > 
> > > Tracking this as https://issues.apache.org/jira/browse/ROL-2184
> > > 
> > > Dave
> > > 
> > > 
> > > On Fri, Oct 2, 2026 at 4:17 PM Richard via user
> > > <[email protected]>
> > > wrote:
> > > 
> > > > Adding more observations.  The issue seems to be due to how the
> > > > images
> > > > were originally "pasted" into the Roller editor.  Based on the
> > > > Roller
> > > > editor's Code View </> button we can see that:
> > > > 
> > > > Method 1.  The user drags an image from another browser window
> > > > into
> > > > the
> > > > Roller editor.  This creates an embedded remote URL which works
> > > > fine
> > > > when the blog entry is published.
> > > > 
> > > > Method 2.  The user drags an image located on the local desktop
> > > > into
> > > > the Roller editor.  This creates a base64 version of the image
> > > > which
> > > > does not render when published.
> > > > 
> > > > When viewing the page source of the published blog entry using
> > > > Method
> > > > 2, the image reference/data is simply no longer there -- it's
> > > > been
> > > > stripped out.
> > > > 
> > > > So one workaround would be to replace any base64 images with
> > > > links
> > > > but
> > > > that's not ideal.  Is it possible that some of the latest
> > > > security
> > > > enhancements are preventing base64 images from being published?
> > > > 
> > > > 
> > > > 
> > > > On Thu, 2026-10-01 at 18:19 -0400, Richard via user wrote:
> > > > > Hello --
> > > > > 
> > > > > After an upgrade to 6.1.6, images that authors copy/pasted
> > > > > directly
> > > > > into the text of a blog entry (instead of embedding as a
> > > > > media
> > > > > resource) no longer display.  Is this expected based on the
> > > > > latest
> > > > > changes and if so, is there any workaround?
> > > > > 
> > > > > Images pasted in this way are still available when an author
> > > > > edits
> > > > > the
> > > > > post.
> > > > > 
> > > > > Thanks,
> > > > > Richard
> > > > 
> > 

Reply via email to