Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update field.upload.php #2747

Closed
wants to merge 2 commits into from
Closed

Update field.upload.php #2747

wants to merge 2 commits into from

Conversation

bndby
Copy link
Contributor

@bndby bndby commented Sep 5, 2017

Add SVG image support

Add SVG image support
@@ -15,7 +15,8 @@ class FieldUpload extends Field implements ExportableField, ImportableField
'image/jpeg',
'image/pjpeg',
'image/png',
'image/x-png'
'image/x-png',
'image/svg+xml'
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please do not use tabs to indent code. Use spaces.

@jensscherbl
Copy link
Member

Just to make everyone aware, there’s discussion about this regarding potential security concerns. From what I recall, the issue is that an SVG could contain JavaScript that would be automatically executed by browsers. See w3c/svgwg#266 and Active Content Injection with SVG Files.

@nitriques
Copy link
Member

@jensscherbl is right. I do not want that in the core. If you want to be able to use it @byura I would recommend using a custom validator file: manifest/validators.php.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants