Digitalocean offer firewall management. I am not sure how this compares to onboard,
It's an additional protection, not an alternative protection. DO's firewall is the same as any normal LAN edge firewall.
Not really... There's nothing stopping a user from linking out to an image since it's part of the Markdown spec. If you're looking to restrict images to only those uploaded to your domain, you'd need to change the way the Markdown plugin handles images (or perhaps there's some CSP header you can add to restrict images from outside the current domain).
Thanks. Figured some such, wh/is why I did not want to open bug report prior to checking in
P.S.; Prior to github and markdown becoming defacto I always preferred asciidoc for such duties. Still do. Much richer options for when you need/want them but still dead simple to use when you don't. Also, actually standardized, as contrasted w/the markdown flavor fest. But hey, github made markdown the golden boy for modern devs that never used else. Don't blame 'em cuz devs wanna code not invest time learning different markup 'time savers'. So whaddya gonna do, eh?