On Sat, Sep 10, 2005 at 04:00:26AM -0700, Brion Vibber wrote:
Jens Frank wrote:
On Sat, Sep 10, 2005 at 10:48:48AM +0100, Neil Harris wrote:
Brion Vibber wrote:
I've enabled SVG uploads and rendering.
It might be useful to mention here that Firefox 1.5beta1 now has SVG support compiled in and enabled by default. The implementation is still slightly buggy, but works well enough for content developers to use for testing, to try to shake out as many bugs as possible before 1.5 proper is released.
Since SVG allows the embedding of javascript, we should not deliver SVG's that were uploaded to our users, unless someone provides a reliable javascript remover.
A checker for JavaScript was included in 1.5 branch a couple months back. Of course another look over the code wouldn't hurt!
Wow! That's nice :-)
JeLuF