Re: [fossil-users] .svg files in .wiki, could one of embed, object or iframe be safely added to the allowed html in .wiki files?

[Venkat Iyer]

Matt,

Of late browsers allow SVGs in img tags.  And Fossil has known svg as
a mime type for quite some time.  (2010-11-07 18:42:46).  I use svgs
in fossil embedded docs all the time, though I haven't tried it in a
wiki page.

 - Venkat


-----Original Message----- From: Matt Welland <estifo...@gmail.com>
Sent: Monday, August 29, 2011 21:40:44 Subject: Re: [fossil-users]
.svg files in .wiki, could one of embed, object or iframe be safely
added to the allowed html in .wiki files?

On further researching the three possible tags (embed, object and
iframe) it appears that only iframe was specifically intended to be
secure and I'm guessing that it isn't considered safe enough for a
wiki with public access?

To be able to add svg illustrations to fossil wiki docs these are the
remaining options:

1. Use the full html option which means losing wiki bullets, lists and
paragraphing.  2. Export the svg graphics to png files which is a PITA
3. Add a build or runtime configurable option to fossil that allows
certain risky tags.

Any other suggestions?

On Mon, Aug 29, 2011 at 4:03 PM, Matt Welland <estifo...@gmail.com>
wrote:

    The following when loaded directly by firefox showed the
    LaTeX_logo.svg but when accessed as
    http://localhost:8081/doc/ckout/www/AnotherExample.wiki none of
    the embed, object or iframe tags were recognized.

    % cat AnotherExample.wiki
    <h2>AnotherExample</h2>
    <embed src="./LaTeX_logo.svg" type="image/svg+xml" />
    <object data="./LaTeX_logo.svg" type="image/svg+xml"></object>
    <iframe src="./LaTeX_logo.svg"></iframe>
    <h2>This is to test that HTML is working</h2>
                                                  
    Could one of these be safely added to the allowed html?

    Matt
    -=-



----------------------------------------------------------------------
_______________________________________________
fossil-users mailing list
fossil-users@lists.fossil-scm.org
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
_______________________________________________
fossil-users mailing list
fossil-users@lists.fossil-scm.org
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users