📢 Notice: Imagehoster Service Proxy Restriction to cdn.steemitimages.com Only

The imagehoster service currently provides the following API endpoints:

• POST /:username/:signature – Upload image
• GET /:hash – Serve image by hash
• GET /p/:base58url – Proxy and transform image
• GET /{width}x{height}/:url – Legacy proxy endpoint (redirects to /p/:base58url)
• GET /avatar/:username/:size – Get user avatar

Previously, the two proxy endpoints below had no any restriction:

• GET /p/:base58url
• GET /{width}x{height}/:url

As a result, images from any third-party platform could be fetched and served through Steemit’s imagehoster. For performance, proxied images were cached on AWS S3.

Change: For compliance reasons, we have restricted these proxy endpoints. They now only proxy images from cdn.steemitimages.com — that means, only images uploaded via imagehoster are eligible for proxy and transformation.

For example:

• Allowed: https://steemitimages.com/0x0/https://cdn.steemitimages.com/Dxxx/abc. jpg (image hosted on cdn.steemitimages.com)
• Not allowed: https://steemitimages.com/0x0/https://example.com/abc. jpg (image on another domain)

The frontend has been updated to remove proxy prefixes for images that are not on cdn.steemitimages.com. See: condenser PR #3971.

If you have questions or concerns, please reach out @ety001.