Uploading a white SVG logo gets it styles removed and becomes black

Contribute Bug
3

SVG recommendations:

  • Disable all DTD processing, XInclude, XSL, XSI and entity resolution.
  • SVG files can include JavaScript, so that has to be disabled

I don’t think <style> is dangerous and I can’t remember why we originally did this.. but the above definitely should be checked.

2 Likes