Hacker News new | ask | show | jobs
by TazeTSchnitzel 2560 days ago
SVGs used as the src= of an <img> tag can't run scripts.
1 comments
btown 2559 days ago
Yep: https://www.w3.org/wiki/SVG_Security
link