this post was submitted on 08 Sep 2025
89 points (98.9% liked)

Tech

2039 readers
145 users here now

A community for high quality news and discussion around technological advancements and changes

Things that fit:

Things that don't fit

Community Wiki

founded 2 years ago
MODERATORS
 

Scalable vector graphics (.svg) files are lightweight, XML-based images that render at any resolution. They’re usually harmless, but they can also contain active code, and hackers appear to be relying on them more often as a means to stealthily deliver malware.

you are viewing a single comment's thread
view the rest of the comments
[–] undefined@lemmy.hogru.ch 21 points 1 month ago (2 children)

Why would they support HTML and JavaScript? ffs

[–] ulterno@programming.dev 4 points 1 month ago (1 children)

Surely not all SVG viewer implementations would be supporting the JS, right?

[–] ISO@lemmy.zip 3 points 4 weeks ago (1 children)

resvg/usvg is a good implementation if you're looking for one.

[–] ulterno@programming.dev 1 points 4 weeks ago

Nice.
Perhaps would be useful for someone making a Lemmy Client.

My thoughts were more in the lines of:

  • Firefox probably supports the JS in SVG
  • I would expect Inkscape to not execute the JS, but let it be when edited and saved.
  • For normal viewers on the desktop, I'd expect JS to be fully ignored.