This is why you should never embed user created SVGs in your site. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		pault on Nov 23, 2016 \| parent \| context \| favorite \| on: The XSS Game by Google This is why you should never embed user created SVGs in your site.

nsgi on Nov 23, 2016 [–]

What if they're in an img tag?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact