From 2b62cc81716c345dc620af00557f849e21753204 Mon Sep 17 00:00:00 2001
From: Daku <admin@codeanimu.net>
Date: Sat, 18 Mar 2017 00:13:16 +0000
Subject: [PATCH] loading SVG via <img> instead of <object> to stop inline JS
 execution

---
 ext/handle_svg/main.php  | 2 +-
 ext/handle_svg/theme.php | 5 ++---
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/ext/handle_svg/main.php b/ext/handle_svg/main.php
index 6db9ad1d..c932f6ba 100644
--- a/ext/handle_svg/main.php
+++ b/ext/handle_svg/main.php
@@ -3,7 +3,7 @@
  * Name: Handle SVG
  * Author: Shish <webmaster@shishnet.org>
  * Link: http://code.shishnet.org/shimmie2/
- * Description: Handle SVG files. (No thumbnail is generated for SVG files)
+ * Description: Handle static SVG files. (No thumbnail is generated for SVG files)
  */
 
 class SVGFileHandler extends Extension {
diff --git a/ext/handle_svg/theme.php b/ext/handle_svg/theme.php
index 8e87ee1d..277703dc 100644
--- a/ext/handle_svg/theme.php
+++ b/ext/handle_svg/theme.php
@@ -5,9 +5,8 @@ class SVGFileHandlerTheme extends Themelet {
 		$ilink = make_link("get_svg/{$image->id}/{$image->id}.svg");
 //		$ilink = $image->get_image_link();
 		$html = "
-			<object data='$ilink' type='image/svg+xml' data-width='{$image->width}' data-height='{$image->height}' id='main_image' class='shm-main-image'>
-				<embed src='$ilink' type='image/svg+xml' />
-			</object>
+			<img src='$ilink' id='main_image' class='shm-main-image' data-width='{$image->width}' data-height='{$image->height}' />
+
 		";
 		$page->add_block(new Block("Image", $html, "main", 10));
 	}