svg-sanitize tool rebuilds untrusted SVG as static graphics, per a Mastodon post

A Mastodon post by Alexandre Dulaunoy describes svg-sanitize, which reportedly rebuilds untrusted SVG files as static vector graphics instead of just removing script tags. The post says it parses XML with defusedxml and checks resource limits; the item is cut off.

Timeline

1. 23 Oct, 20:18 UTCFirst appeared on Alexandre Dulaunoy

Top sources

• svg-sanitize rebuilds untrusted SVG as static vector graphics only. It does not simply search and replace script tags. IAlexandre Dulaunoy