- 🇪🇬Egypt mahmoudsayed96 Cairo
I am using SVG Image module version 3.2, but issue still exists.
- 🇫🇷France mably
Here is an MR that implements validation on upload:
https://git.drupalcode.org/project/svg_image/-/merge_requests/45
It seems the validation failed to prevent user from uploading SVGs that contains script tags.
For example:
<svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg">
<polygon id="triangle" points="0,0 0,50 50,0" fill="#009900" stroke="#004400"/>
<script type="text/javascript">
console.log('xxx');
</script>
</svg>
Please see here for more info.
Fixed
1.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
I am using SVG Image module version 3.2, but issue still exists.
Here is an MR that implements validation on upload:
https://git.drupalcode.org/project/svg_image/-/merge_requests/45