Questions tagged [svg]

An XML-based vector image format for two-dimensional graphics with support for interactivity and animation.

21 questions
9
votes
1 answer

SVG files and billion laughs attack

SVG files are susceptible to billion laughs attack. Our website allows users to upload/submit markdown files and we run the .md file through marked.js before rendering it. Now images in the markdown get rendered as,
Techtwaddle
  • 191
  • 3
4
votes
1 answer

Could an SE question that runs an SVG from a private website potentially be dangerous?

This SE question (now deleted, so not easily viewed) contains an animated SVG that loads from a private website instead of the usual GIF's hosted by imgur. The line is: ![https://www.moonwards.com/img/animations/transfer_time.svg][1] [1]:…
uhoh
  • 1,415
  • 2
  • 12
  • 21