720862 - blog.mozilla.com doesn't allow SVG uploads

Status: RESOLVED FIXED

(mozilla.org Graveyard :: Server Operations, task)

Description

[hwine]

I like svg, and I'm slowing stumbling on all the systems that don't. :(

blog.mozilla.com is the latest. My diagrams look so much better in svg, and even IE supports svg now ;)

Thanks!

Comment 1

[Jake Maul [:jakem]]

Bug opened with infrasec to review a plugin that adds this. Wordpress doesn't support SVG natively.

Comment 2

[hwine]

With the last WordPress upgrade, I can now upload SVG files. However, they are served with an incorrect MIME type, so are only available for download, instead of being displayed in the browser.

Here's the URL to an svg I uploaded, and the resulting headers:
    $ curl -I 'http://blog.mozilla.com/halfire/files/2012/03/DVCSAs-Is.svg'
    HTTP/1.1 200 OK
    Date: Thu, 01 Mar 2012 22:31:12 GMT
    Server: Apache
    X-Backend-Server: pm-app-generic02
    X-Powered-By: PHP/5.2.9
    Content-Length: 172439
    Last-Modified: Thu, 01 Mar 2012 22:28:31 GMT
    ETag: "0e26b8162932f34ccbbe4785b2f4c6f2"
    Expires: Sun, 03 May 2015 08:17:52 GMT
    Cache-Control: max-age=60
    Content-Type: image/svg

The correct mime type is image/svg+xml

Comment 3

[Jake Maul [:jakem]]

The plugin has not passed infrasec review... I have disabled it. We're going to try and work with the upstream author to get it fixed.

In any case, I do not know why it's sending this MIME type instead of the proper one. Apache is set up to send the right one... I can only surmise that Wordpress or this plugin is overriding that and sending image/svg instead.


As an alternative, you could upload your SVG files to a web-accessible location (your people.mozilla.org space, perhaps) and simply link them in when you need them in a post. Something like this might work:

http://tavmjong.free.fr/blog/?p=47
http://www.w3schools.com/svg/svg_inhtml.asp

Not as ideal IMO, but there seems to be very little upstream emphasis on proper SVG support in Wordpress. Even this plugin has barely any downloads, and as you've seen doesn't really seem to work. This seems to be about the only way you're likely to get what you want accomplished in a reasonable time frame.

Comment 4

[hwine]

Agreed - the host svg content elsewhere workaround is good enough for me.

Since svg upload is back to being disabled, I'll close this as invalid.

Thanks!

Comment 5

[Sterling Hamilton]

For what it's worth, the extension has been re-written - should now use the proper mime-type and without shortcodes.

Comment 6

[Jake Maul [:jakem]]

New version has passed security review, we'll get it installed. :)

Comment 7

[Jake Maul [:jakem]]

This plugin is updated (thanks jcrowe), and should be available for you to activate on your blog. Let us know if you have any more trouble with it. Thanks!