Resolve "Prevent deep linking to media files"

Closes #376 (closed)

added Security board::ready part::backend prio::1 type::bug labels

added 1 commit

• 27ea9e89 - Use django-titofisto to serve media files if served locally

Compare with previous version

assigned to @hansegucker and unassigned @nik

requested review from @debdolph

@debdolph Please test together with @hansegucker on ticdesk-dev.

Tests:

• Install branch
• Open a profile with a user picture
• Verify that the URL contains token and timestamp
• Copy the URL
• Wait 10 minutes
• Open the same URL in a browser
• Verify that it returns 404
• Open the profile page again and verifythat the picture still works and is returned with a new URL

added 1 commit

• 8e9dc6a5 - Fix URL inclusion for titofisto

Compare with previous version

added 3 commits

• 8e9dc6a5...0df62126 - 2 commits from branch master
• 70918511 - Merge branch 'master' into 376-prevent-deep-linking-to-media-files-2

Compare with previous version

resolved all threads

approved this merge request

marked this merge request as ready

merged

mentioned in commit c6b1d66b