WordPress.org
Get WordPress

Make WordPress Core

Changes between Version 1 and Version 2 of Ticket #24251, comment 57


Ignore:
Timestamp:
02/27/2016 09:19:15 PM (7 years ago)
Author:
chriscct7
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #24251, comment 57

    v1 v2  
    1212> IT took virtually no time at all to build the PoC WP plugin to allow uploads of SVG. Then WP released an update and the plugin had to be modified.
    1313
    14 The plugin didn't fully sanitize SVGs at the time it was uploaded. Whether the plugin runs now or not as the result of a WordPress update is irrelevant. Moreover, the new SVG 2.0 also adds more places for JS to be placed in an SVG file that the plugin doesn't account for.
     14The plugin didn't fully sanitize SVGs at the time it was uploaded. Moreover, the new SVG 2.0 also adds more places for JS to be placed in an SVG file that the plugin doesn't account for.