Closed Bug 306089 Opened 19 years ago Closed 12 years ago

SVG security review: CSS parsing of SVG properties

Categories

(Core :: SVG, defect)

Product:
Core
Component:
SVG
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WONTFIX

People

(Reporter: jruderman, Unassigned)

References

Details

T Rowley mentioned that this is part of the SVG attack surface and could do with
a security review:

  * CSS parsing of SVG properties - layout/style
Blocks: 306101
It would also be of benefit if one could select and copy graphics to the clipboard
So who would do this review? Is it something we should do at this point?
If we're talking the typical security review, Daniel Veditz is the right person to set it up with, pulling in various other people as needed.  Or are we talking code review here?
Assignee: general → nobody
QA Contact: ian → general
Feel free to reopen if this is going to actually happen.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.