Skip to content

Instantly share code, notes, and snippets.

@bobjflong

bobjflong/evil.svg

Created December 2, 2016 13:57
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save bobjflong/b9d5eb1f42b1098ba47364ca33b0bbe7 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save bobjflong/b9d5eb1f42b1098ba47364ca33b0bbe7 to your computer and use it in GitHub Desktop.
Download ZIP
example bad svg
Display the source blob
Display the rendered blob
Raw
evil.svg
<svg xmlns="http://www.w3.org/2000/svg">
<image onload="alert(1)"></image>
<svg onload="alert(2)"></svg>
<script>alert(3)</script>
<defs onload="alert(4)"></defs>
<g onload="alert(5)">
<circle onload="alert(6)" />
<text onload="alert(7)"></text>
</g>
</svg>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment