1682182 - Deleted media gallery images are not deleted from the server

Status: RESOLVED WORKSFORME

(support.mozilla.org :: General, defect)

Description

[Chris Ilias [:cilias]]

Sometimes people post pornographic or personal images to the media gallery.

We can delete the image from the media gallery, but the URL to the PNG file still works, and I sometimes see people linking directly to image files in the support forum, which means that abusers may be doing that too.

Example:
The following was uploaded yesterday: https://www.screencast.com/t/v4sB3WQBVqGb

I deleted that image from the media gallery: https://support.mozilla.org/en-US/gallery/image/40128

The direct URL still works: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2020-12-12-18-14-28-1a17e0.png

Here's another example: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2020-12-12-10-44-05-a66b92.png

Comment 1

[Leo McArdle [:leo]]

Those direct urls 404 for me, do they still work for you?

There's a bit of a delay between the image being deleted from the gallery, and cleared from the cdn cache. Have we seen someone linking directly to the cdn in the wild, and that working for an extending period of time?

Comment 2

[Chris Ilias [:cilias]]

There was a new one I could test today, and it looks like it's 404ing for others a couple of hours after deletion.