Skip to content

Security: interactivetools-com/SvgSecurityCheck

SECURITY.md

Security Policy

Report a file that gets past SvgSecurityCheck, or any other security problem, privately. Don't open a public issue: until a fix is released, a public report shows everyone how to get a file through.

Include the file, or the smallest file that shows the problem, and the SvgSecurityCheck version that accepted it. Say which browser or program opens it, with its version, and whether the file was opened directly or through an <img> tag. Only the latest release gets security fixes.

There aren't any published security advisories