Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [svg]

An XML-based vector image format for two-dimensional graphics with support for interactivity and animation.

16
votes
2answers
4k views

Why does this XSS vector work in svg but not in HTML?

Why does this vector : <svg><script>alert&#40/1/.source&#41</script> works in http://jsfiddle.net/ZgPY4/2/ and this one <script>alert&#40/1/.source&#41</...
2
votes
1answer
117 views

Could an SE question that runs an SVG from a private website potentially be dangerous?

This SE question (now deleted, so not easily viewed) contains an animated SVG that loads from a private website instead of the usual GIF's hosted by imgur. The line is: ![https://www.moonwards.com/...
9
votes
1answer
720 views

SVG files and billion laughs attack

SVG files are susceptible to billion laughs attack. Our website allows users to upload/submit markdown files and we run the .md file through marked.js before rendering it. Now images in the markdown ...