search

galaxyproject / galaxy

Data intensive science for everyone.
https://galaxyproject.org
Other
1.38k stars 999 forks source link

SVG not detected #6907

Open ThomasWollmann opened 5 years ago

ThomasWollmann commented 5 years ago

When uploading SVGs they are always detected as some other dataformat.

mvdbeek commented 5 years ago

Correct, they should be detected as xml. Would this be a feature request then ? We can sniff them to SVG, but we probably shouldn't display due to possible XSS attacks.

ThomasWollmann commented 5 years ago

I agree that this can face security issues. Maybe one of the solutions in https://digi.ninja/blog/svg_xss.php is suitable for us?