Hacker News new | ask | show | jobs
by JD557 4887 days ago
Also, Its possible to use script tags to run javascript code in an svg.

If you really wanted to, you could pretty much make your own webpage run on the image hosting server.

Also, you could send a malicious script to someone hidden in a cute cat drawing, and it would look like it was the host's fault.