SVG format as resources icons

digitalpoint

Well-known member
I doubt you will see SVGs as an option for user-uploaded images (icons, avatars, etc.) because SVG images can have JavaScript embedded within the image itself. So you would be giving users the ability to execute their custom Javascript on your site.

So allowing it more or less adds an XSS attack/vector to your site.
 
Top