mahara-contributors team mailing list archive
-
mahara-contributors team
-
Mailing list archive
-
Message #25638
[Bug 1444465] Re: Allow the skin class to use SVG image format
If we're going to handle SVG files in some places, we should probably
extend support to accept them everywhere that we accept images.
We need to keep in mind, though, that SVG files are XML files
underneath. So we'll need to take roughly the same security precautions
with them, as we do with user-uploaded XML files. See also
http://security.stackexchange.com/questions/11384/exploits-or-other-
security-risks-with-svg-upload
** Changed in: mahara
Milestone: None => 15.10.0
** Changed in: mahara
Status: New => Confirmed
** Changed in: mahara
Importance: Undecided => Medium
** Tags added: skins
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1444465
Title:
Allow the skin class to use SVG image format
Status in Mahara ePortfolio:
Confirmed
Bug description:
I just found that the Skin class local in lib/skin.php do not allow the use of the SVG format.
I'm not sure if we want to use that but I create this task for reference.
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1444465/+subscriptions
References