Mastodon discussion about sandboxing SVG data

from blog Simon Willison's Weblog, | ↗ original
Mastodon discussion about sandboxing SVG data I asked this on Mastodon and got some really useful replies: How hard is it to process untrusted SVG data to strip out any potentially harmful tags or attributes (like stuff that might execute JavaScript)? The winner for me turned out to be the humble tag. SVG images that are rendered in an image...