In D10188#201097, @davidedmundson wrote:

That would break very core functionality of existing clients and goes against the notification spec.

+ const QUrl url(src);
+ if (url.isLocalFile()) {
+ out.writeAttribute(QStringLiteral("src"), src);
+ } else {
+ //image denied for security reasons! Do not copy the image src here!
+ }

Read that in detail.

Yes.

Keep in mind that infinality is extremely slow and CPU intensive, which is why 2.7 defaults to a newer mode that's significantly faster while still being mostly good in most cases.