3 ms·
SVG is XML which can have security issues due to parsing. And to top it off SVG has a script tag itself. Basically a XSS vector.
by no_circuit 5y ago
SVG is XML which can have security issues due to parsing. And to top it off SVG has a script tag itself. Basically a XSS vector.
- kaba0 5y agoHTML also has a script tag, hell js has an eval! Should we stop using those as well?