zx2c4 added a comment.
In https://phabricator.kde.org/D10188#201097, @davidedmundson wrote: > That would break very core functionality of existing clients and goes against the notification spec. Then the spec itself is vulnerable and needs to change. Switch people to data: URIs, or come up with some other kind of mechanism. Allowing remote users to load and render local paths is not okay. Full stop. REPOSITORY R120 Plasma Workspace REVISION DETAIL https://phabricator.kde.org/D10188 To: davidedmundson, #plasma, fvogt Cc: zx2c4, broulik, aacid, fvogt, plasma-devel, ZrenBot, progwolff, lesliezhai, ali-mohamed, jensreuterberg, abetts, sebas, apol, mart
