3 ms·
But as someone else found out, if you choose "View Image", then the SVG's JS will run.
by jonathanstrange 9y ago
But as someone else found out, if you choose "View Image", then the SVG's JS will run.
- twotwotwo 9y ago(For the record, since another site could cause XSS by iframing the same .svg you loaded in an img tag, yes, definitely don't host random SVGs on your domain. Wish I'd thought of that in my earlier message.)