3 ms·
The HTML Sanitizer API has a subset of SVG that is allowed by the default configuration. It won't help you with sanitizing CSS at all however, style is simply n
by evilpie 5mo ago
The HTML Sanitizer API has a subset of SVG that is allowed by the default configuration. It won't help you with sanitizing CSS at all however, style is simply not allowed by default.
https://developer.mozilla.org/en-US/docs/Web/API/HTML_Sanitizer_API/Default_sanitizer_configuration#svg_elements https://developer.mozilla.org/en-US/docs/Web/API/HTML_Saniti...
https://developer.mozilla.org/en-US/docs/Web/API/HTML_Sanitizer_API/Default_sanitizer_configuration#svg_attributes https://developer.mozilla.org/en-US/docs/Web/API/HTML_Saniti...
- Grokify 5mo agoGood reference, along with the article. I built a SVG sanitizer in Go and will look to these to make it more strict.