Please sign in to comment.
Remove SVG from image types
SVG files should not be treated as images - especially when coming to uploads. An SVG file can contain arbitrary HTML data as well as event handlers in native elements Refs: https://html5sec.org/#svg Original report by: Ishaq Mohammed
- Loading branch information...