Thread:Project:Support desk/How to insert image from other web resources?/reply (3)

I'm not sure if an extension can do that, but the method I described on that page does the same thing. It's better than the example there because you only want people to be able to add images from approved websites because otherwise it's possible for an attacker to gather information on users. Plus if your website is popular, the admin of an unpopular website could use embedding images on your website as a way of dishonestly generating page views. As for the security risk, it's very severe. If you don't have a lot of users and most of them edit the same pages, it's especially severe. An attacker could plant images on your website from his server to gather the IP addresses and computer information of specific users. You also might not know that the pages had images planted on them, because it doesn't need to be an image you can see; the attacker could plant a 1x1 pixel image the same color as the background, and it would still function to gather data.