-
Notifications
You must be signed in to change notification settings - Fork 6
Should not process urls with protocol data: #7
Copy link
Copy link
Open
Description
Right now URLs in css like
.haha {
filter:url("data:image/svg+xml;utf8,<svg xmlns=\'http://www.w3.org/2000/svg\'><filter id=\'grayscale\'><feColorMatrix type=\'matrix\' values=\'0.3333 0.3333 0.3333 0 0 0.3333 0.3333 0.3333 0 0 0.3333 0.3333 0.3333 0 0 0 0 0 1 0\'/></filter></svg>#grayscale")
}
gets changed to
.haha {
filter: url("data:image/svg+xml;utf8,<svg xmlns=http://www.w3.org/2000/svg><filter id=grayscale><feColorMatrix type=matrix values=0.3333 0.3333 0.3333 0 0 0.3333 0.3333 0.3333 0 0 0.3333 0.3333 0.3333 0 0 0 0 0 1 0/></filter></svg>#grayscale");
}
when run with the plugin with no transformations to the URL.
The bug is that the quotes get stripped off, leading to an invalid inline SVG
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels