Inextinguishable_Ravings, 3 months ago

@jenbanim Wait like SVG the image format? I am confused. Do you mean make the SVG in Javascript or are you embending executable code in an image format? Should I be blocking all svgs in emails?

jenbanim, 3 months ago

@Inextinguishable_Ravings Yep, SVG the image format. I only just learned about this, so I could very well be wrong, but it seems that SVG files use XML and support JS and CSS making them function a lot like mini webpages

https://en.wikipedia.org/wiki/SVG#Features

I found an example of JS embedded in SVGs here

https://stackoverflow.com/a/5381905

Sorry I don't know what the security implications are when it comes to email, but given how awful HTML emails are, I'm sure there are implications

Inextinguishable_Ravings, 3 months ago

@jenbanim I am now waiting for the svg that can play doom and am more concerned about image attachments.