[openstreetmap/openstreetmap-website] gravatar / user image should only be available to authenticated users (#1631)

dieterdreist notifications at github.com
Mon Sep 4 20:10:49 UTC 2017



sent from a phone

> On 4. Sep 2017, at 21:59, Simon Poole <notifications at github.com> wrote:
> 
> Just to be clear the issue is (both for gravatars and user images) that it allows association of accounts over multiple Internet services if the images are reused.


Maybe we could add a hint on the picture upload page that people should be aware of this. Requiring being logged in doesn't help protecting users from themselves.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/1631#issuecomment-327022710
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20170904/aa0c3dc8/attachment.html>


More information about the rails-dev mailing list