Skip to content

possible false positive attribute with namespace "serif:id" #113

@ghost

Description

@darylldoyle

Do you see a security problem in the observance of namespaces for attributes?

e.g.: serif:id="Page 1”

<g id="Page-1" serif:id="Page 1">

In my opinion, this should not trigger a “Suspicious attribute ‘serif:id’” message, as the “id” attribute is already on the whitelist.

https://github.com/darylldoyle/svg-sanitizer/blob/master/src/data/AllowedAttributes.php#L56

Metadata

Metadata

Assignees

No one assigned

    Labels

    needs infoNeed more info/context

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions