For a long time I've restricted my site's avatar settings to "gallery only" but now a number of users are asking for the ability to upload or link to their own avatars. I'm running DF 18.104.22.168 - should I be concerned about the security implications of enabling uploading/remote linking or are there checks in place to make this essentially a "non-issue" these days?
Thanks very much, appreciate the feedback. Would you say both options (i.e. uploading and remote linking) are equally safe or is one *potentially* more of a risk? I realise I'm sounding overly risk-averse but I have enough trouble sleeping as it is!!