Opengraph URL Previews don't get cleaned up #1957

New issue

Open

opened 2026-07-11 14:16:04 +00:00 by Crazy_Nicc · 0 comments

Crazy_Nicc commented

2026-07-11 14:16:04 +00:00

This bug was reported by someone in the Continuwuity Support Room (message)

Putting this here so it doesn't get lost

Relevant text:

[...] and discovered that all opengraph url previews actually download and permanently store the linked image/video/audio to your server. there's no functional cleanup for these files (the cleanup is marked with a TODO) and this is probably really easy to exploit to fill your hard drive with garbage. you guys might want to change that over to make it use a media proxy or something similar cuz that is an insane way of handling url preview media. tuwunel has the same issue so i assume it's been inherited from conduit or continuity or w/e
https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/src/service/media/preview.rs#L52

This bug was reported by someone in the Continuwuity Support Room ([message](https://matrix.to/#/!c10y-t1HZB9jgYr9mmaKtMDsS19HXbWRFc6d0bWGVYU/$tAlA4z1ULqObDiqA_WjFOCtw5OFEEXZi9Ellp375acY?via=continuwuity.org&via=matrix.org&via=continuwuity.rocks)) Putting this here so it doesn't get lost Relevant text: > [...] and discovered that all opengraph url previews actually download and permanently store the linked image/video/audio to your server. there's no functional cleanup for these files (the cleanup is marked with a TODO) and this is probably really easy to exploit to fill your hard drive with garbage. you guys might want to change that over to make it use a media proxy or something similar cuz that is an insane way of handling url preview media. tuwunel has the same issue so i assume it's been inherited from conduit or continuity or w/e https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/src/service/media/preview.rs#L52