1354687 - Can't upload svg

Status: RESOLVED FIXED

(developer.mozilla.org Graveyard :: File attachments, enhancement)

Description

[hoffelmann]

What did you do?
================
1. Edit the article https://developer.mozilla.org/en-US/docs/Web/HTTP/Overview
2. upload images as svg

What happened?
==============
it says svg is not allowed filetype, but docu sais it is!

What should have happened?
==========================
svg should be uploaded

Is there anything else we should know?
======================================

Comment 1

[John Whitlock [:jwhitlock]]

We disabled SVG uploads due to a security issue, and we're investigating mitigations so we can re-enable them. Can you attach the SVG you plan to upload to this bug? We may be able to get a staff person to upload it.

Comment 2

[hoffelmann]

Attachment: Client-server-chain.svg

Comment 3

[John Whitlock [:jwhitlock]]

I've uploaded the attachment, and it is available to include in the document:

https://developer.cdn.mozilla.net/media/attachments/2017/04/12/14917/0903e401637d4fd7f8c884837d246f57/Client-server-chain.svg

The mitigation is tracked in a different security bug, so I'm closing this one.

Looking at recent uploads, it appears many people are getting around the issue by converting their .svg files to .png.

Comment 4

[hoffelmann]

Of cause you could work around this but
1. Docu sais you should use SVG
2. Docu ist right about that, SVG is awesome
3. There should be a hint that SVG is temporarely disabled

Comment 5

[John Whitlock [:jwhitlock]]

What is the URL of the documentation that says SVG is enabled?

Comment 6

[hoffelmann]

(In reply to John Whitlock [:jwhitlock] from comment #5)
> What is the URL of the documentation that says SVG is enabled?

https://developer.mozilla.org/en-US/docs/MDN/Contribute/Editor/Images#Supported_image_types

Comment 7

[John Whitlock [:jwhitlock]]

Thank you, I've added a note about SVG being disabled.