> if not validated I thought script tags were an official part of SVG? Meaning t... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		fc417fc802 31 days ago \| parent \| context \| favorite \| on: Google spoofed via DKIM replay attack: A technical... > if not validated I thought script tags were an official part of SVG? Meaning that a valid SVG can contain embedded JS.

bandie91 31 days ago [–]

he must have meant to 'sanitize' or 'filter'

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact