上传白色 SVG 标志会导致样式丢失并变为黑色

[zogstrip]

@codinghorror

I don’t think <style> is dangerous and I can’t remember why we originally did this…

You can load external files in CSS, so you can do things like track users.
But I don’t remember seeing any security issues though.

@codinghorror

but the above definitely should be checked.

We only allow these SVG elements

lib/upload_creator.rb