HTMLPurifier for SVG Files?
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 3.4k
- Forks
- 361
- Avg merge
- 3d 41m
- Merged PRs (30d)
- 2
Description
This is probably more of a configuration issue than something that necessitates a code-change, but I felt it would be worth mentioning.
SVG images can contain embedded JavaScript code, since they're XML documents. e.g. https://hackerone.com/reports/148853
Has anyone had any luck using HTMLPurifier with SVG files? Is any significant code change needed to make it work?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names no source files, tests, or entry points. Start by reviewing how HTMLPurifier handles SVG/XML input and the linked HackerOne report, then determine whether configuration can address embedded JavaScript or whether a defined code change is needed; done should include documented, verified handling for SVG input.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php, xml
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100