Questions tagged [svg]

An XML-based vector image format for two-dimensional graphics with support for interactivity and animation.

Filter by
Sorted by
Tagged with
16
votes
2answers
4k views

Why does this XSS vector work in svg but not in HTML?

Why does this vector : <svg><script>alert&#40/1/.source&#41</script> works in http://jsfiddle.net/ZgPY4/2/ and this one <script>alert&#40/1/.source&#41</...
2
votes
1answer
119 views

Could an SE question that runs an SVG from a private website potentially be dangerous?

This SE question (now deleted, so not easily viewed) contains an animated SVG that loads from a private website instead of the usual GIF's hosted by imgur. The line is: ![https://www.moonwards.com/...
9
votes
1answer
742 views

SVG files and billion laughs attack

SVG files are susceptible to billion laughs attack. Our website allows users to upload/submit markdown files and we run the .md file through marked.js before rendering it. Now images in the markdown ...