A fix for 1.2.43.
Fixed
- The third-party filter works under PHP-FPM and Apache. It runs at the end of the request, when the current directory is no longer the site's: it could not find the image relay key any more, and the page went out unfiltered. Images from other sites, which the security policy now refuses, did not show (the Discord widget avatars), and an embedded video would have loaded without its notice. The defect did not show with PHP's built-in server, which does not change directory at the end of the request.
- The PHP error log also keeps errors from the end of the request, fatal errors included: its path was relative,
and was then resolved from the filesystem root (
/).