Security Risk: Loading external images

[parvez]

rendering the logos from the team urls is a security risk. is there any way the backend could store the logos instead of saving the urls? another option is we could save the base64 of the images instead of logo url.

Images are not innocent, and are very dangerous, take a look on this article: "Stegosploit hides malicious code in images, this is the future of online attacks".
http://securityaffairs.co/wordpress/37302/hacking/stegosploit-malware-images.html

There is also the issue of leaking the IPs and browser details of everyone who visits the page, with everyone who has a logo going to their own server.

[ReadyPlayerEmma]

I've made @jcoffland aware of this and we discussed a solution. That will be supported and migrated to in a future update to the API.