Closed Bug 1530619 Opened 7 years ago Closed 7 years ago

Can't upload SVG file

Categories

(developer.mozilla.org Graveyard :: File attachments, enhancement)

Product:
developer.mozilla.org Graveyard
Component:
File attachments
Platform:
All
Other
Type:
enhancement
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: germain.souquet, Unassigned)

Details

(Whiteboard: [specification][type:bug])

What did you do?

  1. Edit the page 
    2. Try to add an attachement

What happened?

I received the error message:

  • Files of this type are not permitted.

What should have happened?

The upload should have worked seamlessly

Is there anything else we should know?

The thing that confuses me is that this page already displays SVG images... but for some reason mine isn't accepted.

I am trying to update this page: https://developer.mozilla.org/en-US/docs/Web/API/Web_Audio_API/Basic_concepts_behind_Web_Audio_API

Flags: needinfo?(jwhitlock)

We've disabled SVG uploads because the format is flexible enough to include JavaScript and image references, and can potentially be used as a cross-site scripting vector. Some examples can be seen in bug 1230317. We're planning to mitigate with a Content Security Policy (bug 948151 and private bug 1287621). Until then, staff needs to review and upload SVG attachments. Alternatively, the images can be converted to PNG or another allowed format.

Can you open a content issue on https://github.com/mdn/sprints/issues, and add the images to the GitHub issue?

Flags: needinfo?(jwhitlock) → needinfo?(germain.souquet)

Will do, thank you for the feedback 👍

Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Resolution: --- → WONTFIX
Flags: needinfo?(germain.souquet)
Product: developer.mozilla.org → developer.mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.