Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Make allowing <script> tags in SVGs configurable #2

Open
Vinai opened this issue Jun 30, 2021 · 2 comments
Open

Make allowing <script> tags in SVGs configurable #2

Vinai opened this issue Jun 30, 2021 · 2 comments
Labels
enhancement New feature or request

Comments

@Vinai
Copy link
Collaborator

Vinai commented Jun 30, 2021

Currently <script> tags in SVGs are not allowed due to security concerns.
It would be nice to allow them based on a system configuration setting.
@Vinai Vinai added the enhancement New feature or request label Jun 30, 2021
@ihor-sviziev
Copy link

What is the use case for using scripts in svgs?

@Vinai
Copy link
Collaborator Author

Vinai commented Jul 26, 2021

The SVG script tag is pretty much an equivalent of the regular HTML script tag (except that it uses href instead of src iirc).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@Vinai @ihor-sviziev