Menu

#Non

2 posts

Feed·
2 of 2 posts
The woes of sanitizing SVGs
📰
0Read More

The woes of sanitizing SVGs

muffin.ink·@HashtagPLUS·6 months ago
#a2RZg5Ax
#example#node#non#safe_url#funcdef

Scratch has a long history of SVG-related vulnerabilities. The source of these is that Scratch parses user-generated (ie. attacker-controlled) content into an element and appends it into the main document for various operations (eg.…

15s