Allow the skin class to use SVG image format

Bug #1444465 reported by Gilles-Philippe Leblanc
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mahara
Confirmed
Wishlist
Unassigned

Bug Description

I just found that the Skin class local in lib/skin.php do not allow the use of the SVG format.
I'm not sure if we want to use that but I create this task for reference.

Tags: skins
affects: dragonflow → mahara
Revision history for this message
Aaron Wells (u-aaronw) wrote :

If we're going to handle SVG files in some places, we should probably extend support to accept them everywhere that we accept images.

We need to keep in mind, though, that SVG files are XML files underneath. So we'll need to take roughly the same security precautions with them, as we do with user-uploaded XML files. See also http://security.stackexchange.com/questions/11384/exploits-or-other-security-risks-with-svg-upload

Changed in mahara:
milestone: none → 15.10.0
status: New → Confirmed
importance: Undecided → Medium
tags: added: skins
Aaron Wells (u-aaronw)
Changed in mahara:
milestone: 15.10.0 → 16.04.0
Changed in mahara:
importance: Medium → Wishlist
milestone: 16.04.0 → none
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.