3 ms·
SVGs are also images that can contain scripts if not validated. It's also relevant that github.io is on the public suffic list, which impacts a bunch of downst
by EE84M3i 1y ago
SVGs are also images that can contain scripts if not validated.
It's also relevant that github.io is on the public suffic list, which impacts a bunch of downstream things and isolates the subdomains from each other.
- fc417fc802 1y ago> if not validated I thought script tags were an official part of SVG? Meaning that a valid SVG can contain embedded JS.
- bandie91 1y agohe must have meant to 'sanitize' or 'filter'