Skip to content

Commit 3bbbbf3

Browse files
committed
Remove SVG from image types
SVG files should not be treated as images - especially when coming to uploads. An SVG file can contain arbitrary HTML data as well as event handlers in native elements Refs: https://html5sec.org/#svg Original report by: Ishaq Mohammed
1 parent 7900807 commit 3bbbbf3

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

Diff for: src/Filesystem/Definitions.php

+1-2
Original file line numberDiff line numberDiff line change
@@ -182,8 +182,7 @@ protected function imageExtensions()
182182
'bmp',
183183
'png',
184184
'webp',
185-
'gif',
186-
'svg'
185+
'gif'
187186
];
188187
}
189188

0 commit comments

Comments
 (0)