poorman
Joined 13 years ago
Karma
1,125
Submissions
285
Member since
Jun 29
Joined 13 years ago
Do you allow SVGs to be uploaded anywhere on your site? This is a PSA that you're probably at risk unless you can find the few hundred lines of code doing the sanitization.
Note to Ruby on Rails developers, your active storage uploaded SVGs are not sanitized by default.