james/fembooru
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

loading SVG via <img> instead of <object> to stop inline JS execution

Browse Source
This commit is contained in:
Daku 2017-03-18 00:13:16 +00:00
parent e2272e7786
commit 2b62cc8171
2 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ext/handle_svg/main.php
View File

@ -3,7 +3,7 @@
* Name: Handle SVG
* Author: Shish <webmaster@shishnet.org>
* Link: http://code.shishnet.org/shimmie2/
* Description: Handle SVG files. (No thumbnail is generated for SVG files)
* Description: Handle static SVG files. (No thumbnail is generated for SVG files)
*/
class SVGFileHandler extends Extension {

5
ext/handle_svg/theme.php
View File

@ -5,9 +5,8 @@ class SVGFileHandlerTheme extends Themelet {
$ilink = make_link("get_svg/{$image->id}/{$image->id}.svg");
// $ilink = $image->get_image_link();
$html = "
<object data='$ilink' type='image/svg+xml' data-width='{$image->width}' data-height='{$image->height}' id='main_image' class='shm-main-image'>
<embed src='$ilink' type='image/svg+xml' />
</object>
<img src='$ilink' id='main_image' class='shm-main-image' data-width='{$image->width}' data-height='{$image->height}' />
";
$page->add_block(new Block("Image", $html, "main", 10));
}