3 ms·

I think they block svg but not other images because svgs can contain javascript and could be used in a phishing attack. i.e. data:image/svg+xml,<svg xmlns='

I think they block svg but not other images because svgs can contain javascript and could be used in a phishing attack. i.e. data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg'><script>alert('hi')</script></svg>

jancsika 9y ago
Oh wow, even if you right-click "View Image" the script gets run.