In the future, Sandstorm's Content Security Policy will block external content.

[dwrensha]

This will have an effect on:

1. gravatar usage in the admin area
2. themes using fonts.googleapis.com
3. other things, possibly

We'll want to replace gravatar with Sandstorm's own user profile features. For the fonts, maybe we can bundle them?

[ocdtrekkie]

I bundled Google fonts that Scrumblr used. Stuff like jQuery as well may need to be bundled if WordPress uses it.

When WordPress allows people to upload their own themes, Google fonts may also be a problem.

[dwrensha]

I've learned that avatars can be turned off with update_option('show_avatars', 0); and they can be overridden through the pluggable get_avatar() function.

[Ryman]

Looks like some oembed stuff doesn't work without curl, so I guess that's affected by this too? http://help.semplicelabs.com/customer/portal/questions/12932083-vimeo-embed-troubleshooting

[xet7]

This issue was moved to sandstormports/wordpress-sandstorm#4