• [object Object]@lemmy.world
    link
    fedilink
    arrow-up
    1
    ·
    edit-2
    1 month ago

    Effectively opening an SVG in a JS-capable application is the same as allowing a stranger to run arbitrary code on your computer.

    If your browser allows JS access or create random files, or do other arbitrary stuff, that’s an extremely shit browser.