Collaborate Disseminate
Does anyone know of a way to prevent JS from running inside of an SVG or stripping out JS from an SVG? In my use case I’d prefer to keep the image as an SVG and not convert it to a JPG. I’ve thought about stripping out script… Continue reading Restrict JS in SVGs
This SE question (now deleted, so not easily viewed) contains an animated SVG that loads from a private website instead of the usual GIF’s hosted by imgur. The line is:
![https://www.moonwards.com/img/animations/transfer_tim… Continue reading Could an SE question that runs an SVG from a private website potentially be dangerous?
[Scott Swaaley] needed a bunch of timing pulleys for the clock he was building. He had already decided on the MXL profile, but he needed so many of these toothed pulleys in so many configurations (hex-bored, hubless) that it would blow out his budget. Plus, he wanted them transparent as well. So why not just laser them out of acrylic?
Not finding anything useful on the manufacturers’ sites, [Scott] decided to create his own web application to generate the shapes and download them as SVGs, dreaming of a resource like Gear Generator except for timing pulleys instead of involute spur …read more
SVG files are susceptible to billion laughs attack. Our website allows users to upload/submit markdown files and we run the .md file through marked.js before rendering it. Now images in the markdown get rendered as,
This question is about the SVG virus malware I got through Facebook, which adds an extension file to Google Chrome. It’s called one or ubo. Some articles write that it is ransomware.
I think I got this, but I am not a pro… Continue reading SVG virus/ malware with an extension on Google Chrome (one)
This question is about the SVG virus malware I got through Facebook, which adds an extension file to Google Chrome. It’s called one or ubo. Some articles write that it is ransomware.
I think I got this, but I am not a pro… Continue reading SVG virus/ malware with an extension on Google Chrome (one)
This question is about the SVG virus malware I got through Facebook, which adds a malicious Google Chrome extension. It’s called one or ubo. Some articles write that it is ransomware.
I think I was infected by this, but I… Continue reading SVG virus/ malware with an extension on Google Chrome (one) [on hold]
Currently assessing an application, I found out that it is possible to submit an SVG fill containing Javascript (the app is also vulnerable to XXE). I wondered if there was a method to prevent those vulnerabilities and secure… Continue reading Preventing XSS in SVG
Currently assessing an application, I found out that it is possible to submit an SVG file containing JavaScript (the app is also vulnerable to XXE). I wondered if there was a method to prevent those vulnerabilities and secure… Continue reading How to prevent XSS in SVG file upload?
“The great thing about standards is that there are so many to choose from.” Truer words were never spoken, and this goes double for the hobbyist world of hardware hacking. It seems that every module, every company, and every individual hacker has a favorite way of putting the same pins in a row.
We have an entire drawer full of adapters that just go from one pinout to another, or one programmer to many different target boards. We’ll be the first to admit that it’s often our own darn fault — we decided to swap the reset and ground lines …read more
