mirror of
https://github.com/unmojang/drasl.git
synced 2025-08-03 10:56:06 -04:00

Adds the `AllowTextureFromURL` config option and makes it false by default. Admins can still set skins and capes by URL, via the front end or the API, regardless of this setting. Allowing users to specify textures via URL is a possible security concern and doesn't really improve the UX that much, so we should make it opt-in. For https://github.com/unmojang/drasl/issues/116.