# Beim Hochladen eines weißen SVG-Logos werden die Stile entfernt und es wird schwarz

**URL:** <https://meta.discourse.org/t/uploading-a-white-svg-logo-gets-it-styles-removed-and-becomes-black/108575>\
**Category:** Bug\
**Created:** [7. Februar 2019 um 08:46 UTC](https://meta.discourse.org/t/uploading-a-white-svg-logo-gets-it-styles-removed-and-becomes-black/108575 "2019-02-07T08:46:10Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)\
**Post date:** [7. Februar 2019 um 10:22 UTC](https://meta.discourse.org/t/uploading-a-white-svg-logo-gets-it-styles-removed-and-becomes-black/108575/4 "2019-02-07T10:22:23Z")

</div>

> [@codinghorror](#):
>
> I don’t think `<style>` is dangerous and I can’t remember why we originally did this…

You can load external files in CSS, so you can do things like [track users](https://github.com/jbtronics/CrookedStyleSheets).  
But I don’t remember seeing any security issues though.

> [@codinghorror](#):
>
> but the above _definitely_ should be checked.

We only allow these SVG elements

> <https://github.com/discourse/discourse/blob/19386ec2ea8dacb5574e5218c672370e12c83723/lib/upload_creator.rb#L10-L13>

---

_[View the full topic](https://meta.discourse.org/t/uploading-a-white-svg-logo-gets-it-styles-removed-and-becomes-black/108575)._