Disallow anonymous users from viewing image & file URLs

This came up in an internal discussion. Putting it up here so we can track it. Discourse image URLs on a invitation-only forum are still publicly viewable ...

from Google Alert - anonymous http://ift.tt/2h8fHED
via IFTTT