Re: [svgwg] Dissallow inline <script> in SVG (#829)

Why is it that Facebook, Twitter and half of the email clients fail to support SVG?
Is it because even if a browser doesn't execute a script, somebody can download the image and execute a script later? or do I have this wrong?

-- 
GitHub Notification of comment by steve-mills
Please view or discuss this issue at https://github.com/w3c/svgwg/issues/829#issuecomment-787883748 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 1 March 2021 11:41:47 UTC