Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Stored XSS using SVG #1299

Closed
santhosh-duraipandiyan opened this issue Oct 9, 2021 · 0 comments
Closed

Stored XSS using SVG #1299

santhosh-duraipandiyan opened this issue Oct 9, 2021 · 0 comments

Comments

@santhosh-duraipandiyan
Copy link

In the new topics, Stored XSS is possible by using a specially crafted SVG file.
2
3
4
5
qichunren added a commit to qichunren/homeland that referenced this issue Oct 9, 2021
@qichunren
Not allowed upload svg image currently, fixed XSS issue ruby-china#1299
244e1b7
@qichunren qichunren mentioned this issue Oct 9, 2021
Merged
huacnlee added a commit that referenced this issue Oct 9, 2021
@huacnlee
Merge pull request #1300 from qichunren/fix_svg_upload_xss
7fe2a0a 
Not allowed upload svg image currently, fixed XSS issue #1299
@huacnlee huacnlee closed this as completed Oct 9, 2021
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@huacnlee @santhosh-duraipandiyan