Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Magento CE 2.1.9 SVG Logo Upload #10999

Closed
ramindas opened this issue Sep 22, 2017 · 6 comments
Closed

Magento CE 2.1.9 SVG Logo Upload #10999

ramindas opened this issue Sep 22, 2017 · 6 comments
Labels
Issue: Format is not valid Gate 1 Failed. Automatic verification of issue format is failed non-issue

Comments

@ramindas
Copy link

Cannot upload .SVG image as Magento 2.1.9 Logo

Did a fresh installation of Magento CE 2.1.9 tried to upload .SVG file as logo image and it says "Attention - We don't recognize or support this file extension type"
Magento 2.1.9 PHP 7.0.23 MySQL 5.6.37

Content > Configuration > Edit > Header > Logo Iamge

Expected result
Need to upload .SVG as logo image

Actual result
image

image

@magento-engcom-team magento-engcom-team added the Issue: Format is not valid Gate 1 Failed. Automatic verification of issue format is failed label Sep 22, 2017
@orlangur
Copy link
Contributor

GitHub is intended for bug reports, please use Magento Stack Exchange for questions on how particular customization can be implemented.

Here is an example of such customization: https://magento.stackexchange.com/a/186976/40869

@ramindas
Copy link
Author

ramindas commented Sep 22, 2017

Hi,

Added to the XML but is is not working. CE 2.1.8 allowing to upload and extension was there.

Thanks

@orlangur
Copy link
Contributor

orlangur commented Sep 22, 2017

You are right, svg was intentionally removed due to security reasons: https://magento.com/security/patches/magento-2016-and-219-security-update APPSEC-1673: Stored xss using svg images in Favicon.

You can get the idea how to enable it back in your custom module by searching "svg" in 2.1.8...2.1.9.

Still, such question falls out this GitHub which is intended for bug reports.

@ramindas
Copy link
Author

Hi,

Thanks for your reply I'm talking about Logo image cannot upload .SVG sa a logo too..

Thanks & Regards,

@orlangur
Copy link
Contributor

From changeset it looks like svg was completely disallowed as same vector attack could be possible with logo and any other image.

@ramindas
Copy link
Author

Thanks for your Reply

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Issue: Format is not valid Gate 1 Failed. Automatic verification of issue format is failed non-issue
Projects
None yet
Development

No branches or pull requests

3 participants