5 ms·
How on earth? > The answer is perhaps surprising - SVG files can contain JavaScript, CSS and load external content There you are
by linspace 4y ago
How on earth?
> The answer is perhaps surprising - SVG files can contain JavaScript, CSS and load external content
There you are
- blenderdt 4y agoNo, this is not the reason. HTML also can contain Javascript, CSS and load external content.
- deleted 4y ago[deleted]
- purkka 4y agoTechnically, the issue is not that SVG allows active content. It is that untrusted XML is being inserted in the DOM by Scratch. Arbitrary SVG content can be safely embedded as an image, either via the img tag or as a background image.