Tag: SVG

Security, Tutorials

The hard problem of sanitizing user-uploaded SVGs (and why most libraries get it wrong)

| by admin | Leave a Comment on The hard problem of sanitizing user-uploaded SVGs (and why most libraries get it wrong)
Close-up of HTML and CSS code on a computer screen — markup-parsing context for an SVG security article (photo: Pixabay / Pexels)

The Scratch team’s blog post on SVG sanitization (linked from Hacker News this week) is one of those technical write-ups that really should be required reading for anyone who lets users upload images to a web app. The author’s account …

Continue reading "The hard problem of sanitizing user-uploaded SVGs (and why most libraries get it wrong)"