4 ms·
Wow. This is really scary. Especially the SVG issue. Is it common to support xlink:href on servers that use ImageMagick? It seems like that would allow you to r
by 0942v8653 10y ago
Wow. This is really scary. Especially the SVG issue. Is it common to support xlink:href on servers that use ImageMagick? It seems like that would allow you to read any readable image on the FS anyway, which is a vulnerability in itself.
- zerocrates 10y ago> It seems like that would allow you to read any readable image on the FS anyway, which is a vulnerability in itself. It does. You can trivially use the same feature to render the contents of a readable text file into the output image, too.