Thread:Andrewds1021/@comment-27345308-20191022121531

I promised I'll supply a Discussions image whitelist, so here it is (I hope you understand regex): ^http(s)?:\/\/(www\.)?(static\.wikia\.nocookie\.net|vignette\.(wikia-dev|fandom-dev)\.(us|pl))\/.+ This is only the whitelist for the image host,  is the format for the part after the host, where each of the parts represents a hexadecimal number. If I had to guess how that part is formed, I would say it is a random unique ID and I doubt it's guaranteed that past avatars of users are still on Fandom servers.

Coincidentally, there was a security issue with image hosts not being validated in Discussions images that I discovered while trying to provide information about the image whitelist at the time of writing that post. It has been fixed now, and the error message returned by the Discussions API is (once again) returning the above regular expression. 