3 ms·
We ended up mitigating by sanitising tags+attributes, and validating all xlink:href's in the SVG-XML, using a library like bleach (https://github.com/mozilla/bl
by rbut 10y ago
We ended up mitigating by sanitising tags+attributes, and validating all xlink:href's in the SVG-XML, using a library like bleach (https://github.com/mozilla/bleach https://github.com/mozilla/bleach) before passing to ImageMagick.
Probably not a bad thing to be doing anyway.