4 ms·
If you trust your browser it's fine, and if you don't then both CSS and SVG are significantly more risky.
by lmm 5mo ago
If you trust your browser it's fine, and if you don't then both CSS and SVG are significantly more risky.
- sysguest 5mo ago> then both CSS and SVG are significantly more risky. how???
- margalabargala 5mo agoThis isn't true at all. Anything SVG does maliciously, it does by containing JavaScript, so SVG's worst case is a subset of JS's.
- fc417fc802 5mo agoRemind me again what the ratio of browser sandbox escapes coupled with full RCE is between JS, CSS, and SVG?