← All topics
svg-security
Latest stories covering svg-security, with summaries and links to related coverage.
1 stories · 1 reports · page 1 of 1
Connected topics
The woes of sanitizing SVGs
research
13 min read
Scratch has a history of SVG-related vulnerabilities due to the parsing of user-generated content into an <svg> element, which is appended to the main document. This operation poses inherent security risks, leading Scratch to implement increasingly complex sanitization methods.