Fix the issue brought up in the GitHub issue
here involving access being allowed to images outside of the plugin folder. Furthermore, this adds checks onto URLs to ensure they are not looping back to the same server to access images on the server or performing network requests against any webservers on the same machine.
In this same line, URLs starting with file no longer function. Using URLs also now requires the permission:
Code (Text):
images.command.create.url
Thanks to
Axyss for contributing to this fix.