Hacker News new | ask | show | jobs
by felixfbecker 720 days ago
<script> in SVGs is also not a concern nowadays if you use a CSP (even for user-uploaded content).