muffin.ink personal blog
The woes of sanitizing SVGs
Scratch has a long history of SVG-related vulnerabilities. The source of these is that Scratch parses user-generated (ie. attacker-controlled) content into an <svg> element and appends it into the main document for various operations (eg. measuring SVG bounding box in a more reliable way than viewbox or width/height).
- Points
- 271
- HN comments
- 109
- Submissions
- 1
- Cited by
- 0 commenters
Web & FrontendSecurity & Privacy2026
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Apr 27, 2026 | The woes of sanitizing SVGs by varun_ch | 271 | 109 |
