The site doesn't really explain quite why modern browsers still happily execute javascript from inside an .svg file? It seems like a trivial thing to patch.
this post was submitted on 10 Aug 2025
17 points (100.0% liked)
Hacker News
2602 readers
509 users here now
Posts from the RSS Feed of HackerNews.
The feed sometimes contains ads and posts that have been removed by the mod team at HN.
founded 1 year ago
MODERATORS
seeding boobytrapped .svg files
Oh well, some lines write themselves
Gotta have my print-quality vector porn!
Boobytrap sounds like a slur.