adam/Piwigo
1
0 Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-10-30 21:52:00 +01:00
Code Issues 657 Packages Projects Releases Wiki Activity

Sanitize SVG files #2212

New Issue
Closed
opened 2026-10-05 01:09:57 +02:00 by adam · 1 comment
adam commented 2026-10-05 01:09:57 +02:00
Owner
Copy link
Copy source

SVG files can contain embedded script or even SVG content + something else content and finfo_file will still consider the file as SVG. We need to sanitize the SVG file. @Renarde-dev has found this dedicated library https://github.com/darylldoyle/svg-sanitizer

SVG files can contain embedded script or even SVG content + something else content and `finfo_file` will still consider the file as SVG. We need to sanitize the SVG file. @Renarde-dev has found this dedicated library https://github.com/darylldoyle/svg-sanitizer <!-- github-sync-id:4330556443 -->
adam closed this issue 2026-10-05 01:09:57 +02:00
adam commented 2026-10-05 01:09:58 +02:00
Author
Owner
Copy link
Copy source

I tested the library with a lot of valid and malicious SVGs, everything works.
SVG that contains MSL or href to local files are detected.

I tested the library with a lot of valid and malicious SVGs, everything works. SVG that contains MSL or `href` to local files are detected. <!-- github-comment-id:4335724761 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#2212