News:

SMF 2.1.4 has been released! Take it for a spin! Read more.

Main Menu

How to use svg files for avatars?

Started by Julius_2000, May 04, 2023, 07:21:03 AM

Previous topic - Next topic

Julius_2000

Ìs it possible to use svg formats for avatars, too? I was able to change the default avatar to an svg but I would also like to make them selectable in one's profile.

Arantor

It's not an option at present because the system can't properly deal with the size implications from what I remember.

It's also a (significant) security risk without proper sanitisation.

Julius_2000

Thanks, @Arantor!

Quote from: Arantor on May 04, 2023, 08:06:37 AMIt's also a (significant) security risk without proper sanitisation.
Ah, because of the option to use codes inside them?

Arantor

SVGs can invoke JavaScript, it's about on par with letting people use whatever HTML they want in posts.

Now, it is possible to harden against this (libraries exist to do just this) but it is not immediately plug-in-able to SMF.

landyvlad

"Put as much effort into your question as you'd expect someone to give in an answer"

Please do not PM, IM or Email me with questions on astrophysics or theology.  You will get better and faster responses by asking homeless people in the street. Thank you.

Be the person your dog thinks you are.

Sesquipedalian

#7721, which is marked for 2.1.5, may be of interest here.
I promise you nothing.

Sesqu... Sesqui... what?
Sesquipedalian, the best word in the English language.

Advertisement: