2016-12-01 UTC
# 
petermolnar I also started to think about loading avatars for webmentions from remote websites... it sounds like an easy attack vector for the future. ( Eg. browser vulnerability on an image type -> send webmention -> make it display my "avatar" -> profit ! )