Script inside SVG?
Script inside SVG?
Posted Apr 17, 2025 7:06 UTC (Thu) by joib (subscriber, #8541)In reply to: Script inside SVG? by epa
Parent article: Catanzaro: Dangerous arbitrary file read vulnerability in Yelp
Well, there is precedent for this kind of (mis?)feature, e.g. Postscript. Then the world switched over to PDF, where one of the advantages was that PDF isn't a full Turing complete language, and thus less scope for issues (exploits, or DOS'ing your printer with malformed Postscript, etc.). But of course, modern PDF also has support for embedded Javascript, so plus ça change..