svg-sanitize

Activity, over time

Daily observations from the public event archive.

Attention

Daily stars & forks

Loading attention chart

Star accumulation

Cumulative stars

Loading star accumulation chart

Pull requests

Daily opens & merges

Loading pull requests chart

Conversations

Daily issues & comments

Loading conversations chart

Community

Daily accounts & reviews

Loading community chart

Releases

Daily releases

Loading releases chart

Mentions

1post · 30d
Nov 40 posts
  1. svg-sanitize rebuilds untrusted SVG as static vector graphics only. It does not simply search and replace script tags. It parses XML with defusedxml, checks resource limits, and constructs an entirely new XML tree from a small, explicit allowlist of elements, attributes, and valid values. Thanks to @wachizungu for the initial idea at the @hack_lu hackathon and also @therealsaumil to trigger me again about SVG at the 20th edition hack.lu ;-) It's a prototype and maybe utterly broken. 🔗 adulau/svg-sanitize #svg #cybersecurity #hacklu #opensource

    104 favourites · 4 comments · 87 boosts

Latest stargazers

The last 10 distinct accounts we observed this year.

Most active participants

PR, issue, comment & review events in the past year.

Packages

Scan pending.

Live mentions badge

Show how many posts mention your project in the last 30 days.

Live mentions · last 30 days
adulau/svg-sanitize mentions in the last 30 days