I'd like to upload some flags in SVG format, but I get this message whenever I try to:
I understand XSS is a concern, but even if you don't want to go through the trouble of setting up an SVG sanitizer, there are ways of mitigating the risk:".svg" is not a permitted file type.
GitHub - digininja/svg_xss: Defending against XSS in SVG files
Defending against XSS in SVG files. Contribute to digininja/svg_xss development by creating an account on GitHub.
github.com