@graf @Moon Okay. The actual fix is this:
config :pleroma, :markup, allow_inline_images: falseThere’s a scary comment above the line in Pleroma.
config :pleroma, :markup, # XXX - unfortunately, inline images must be enabled by default right now, because # of custom emoji. Issue #275 discusses defanging that somehow. allow_inline_images: true,…but custom emojis do NOT rely on inline images. There’s no good reason for it to be on.