From 56f90412bfe6b58cfe3a35d5359a2ff020b50262 Mon Sep 17 00:00:00 2001
From: Oliver Falk <oliver@linux-kernel.at>
Date: Mon, 22 Nov 2021 13:57:12 +0100
Subject: [PATCH] Enhance the list. It's possible some non-ssl sites still use
 gravatar without https and some sites use secure.gravatar.com

---
 config.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/config.py b/config.py
index 158a6bb..3188dfa 100644
--- a/config.py
+++ b/config.py
@@ -212,7 +212,9 @@ CACHE_RESPONSE = True
 # Trusted URLs for default redirection
 TRUSTED_DEFAULT_URLS = [
     "https://ui-avatars.com/api/",
+    "http://gravatar.com/avatar/",
     "https://gravatar.com/avatar/",
+    "https://secure.gravatar.com/avatar/",
     "https://avatars.dicebear.com/api/",
 ]