3 ms·
Addendum: this is safe because browsers only run scripts in SVGs when the SVG is served as a page, and not when it’s embedded in a different page as an image or
by skrebbel 3y ago
Addendum: this is safe because browsers only run scripts in SVGs when the SVG is served as a page, and not when it’s embedded in a different page as an image or background.
Doing <img src=“evil.svg”> is always safe.