JavaScript in SVGs
2024-01-19 20:45:12.323235+01 by
Dan Lyke
1 comments
RT bert hubert 🇺🇦🇪🇺 @bert_hubert@fosstodon.org
And another unfortunate security thing I learned today is that .svg files can contain JavaScript, and that your browser will happily execute that if someone directly views your image (so not through ![]()
). This has consequences for anyone hosting user supplied images. Thank you Wander Nauta for pointing this out. The painful story is here: https://github.com/berthubert/trifecta/issues/38
[ related topics:
Interactive Drama Photography
]
comments in ascending chronological order (reverse):
#Comment Re: JavaScript in SVGs made: 2024-01-20 18:06:21.518611+01 by:
meuon
Oh that could be sneaky.