Enhance the list. It's possible some non-ssl sites still use gravatar without https and some sites use secure.gravatar.com

This commit is contained in:
Oliver Falk
2021-11-22 13:57:12 +01:00
parent e260e6ff2f
commit 56f90412bf

View File

@@ -212,7 +212,9 @@ CACHE_RESPONSE = True
# Trusted URLs for default redirection
TRUSTED_DEFAULT_URLS = [
"https://ui-avatars.com/api/",
"http://gravatar.com/avatar/",
"https://gravatar.com/avatar/",
"https://secure.gravatar.com/avatar/",
"https://avatars.dicebear.com/api/",
]