[wp-trac] [WordPress Trac] #24251: Reconsider SVG inclusion to get_allowed_mime_types

[WordPress Trac]

#24251: Reconsider SVG inclusion to get_allowed_mime_types
---------------------------+-----------------------
 Reporter:  JustinSainton  |       Owner:
     Type:  enhancement    |      Status:  reopened
 Priority:  normal         |   Milestone:
Component:  Upload         |     Version:
 Severity:  normal         |  Resolution:
 Keywords:  early          |     Focuses:
---------------------------+-----------------------

Comment (by enshrined):

 Replying to [comment:43 chriscct7]:
 > From my understanding of Wikimedia's system, they actually upload the
 SVG and then after sanitizing it they convert it to a PNG, thus solving
 the security issues, but also in the process losing all the benefits of
 having an SVG in the first place.
 >
 > From https://www.mediawiki.org/wiki/Manual:Image_administration
 > > MediaWiki supports SVG image rendering: if enabled, SVG images can be
 used like other image files — they will automatically be rendered as a PNG
 file and thumbnailed as needed on the fly.

 Yeah that seems correct, from what I can see they remove any script
 elements and then just convert to multiple PNGs of different sizes. They
 then serve the PNGs as the images on-site and just offer the SVG as a
 direct download from the media page.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/24251#comment:45>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform