Script inside SVG?
Script inside SVG?
Posted Apr 17, 2025 20:20 UTC (Thu) by sfeam (subscriber, #2841)In reply to: Script inside SVG? by excors
Parent article: Catanzaro: Dangerous arbitrary file read vulnerability in Yelp
"You don't need SVG for that though, you can use HTML <canvas> + JS instead"
Well yes. but so far as I know the HTML/canvas representation isn't useful for anything other than being viewed in a web browser. The svg representation is still a reasonably portable figure even when detached from its interactive js parts, and can easily be edited or modified by other tools. FWIW I have used the svg-based tool Inkscape for many years now for creating technical figures. Being able to start from, edit, or include, svg figures from gnuplot is a big plus.