You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
For BIMI and possibly other security related use cases it is necessary to limit SVG rendering to base profile "Tiny PS", please see here for the relevant standard.
For an intermediate solution, there could be a new method SVG.getBaseProfile(), so callers can check the SVG profile before requesting rendering the parsed SVG. For security reasons it would of course be better to actually check the profile during rendering.
The text was updated successfully, but these errors were encountered:
For BIMI and possibly other security related use cases it is necessary to limit SVG rendering to base profile "Tiny PS", please see here for the relevant standard.
For an intermediate solution, there could be a new method SVG.getBaseProfile(), so callers can check the SVG profile before requesting rendering the parsed SVG. For security reasons it would of course be better to actually check the profile during rendering.
The text was updated successfully, but these errors were encountered: