Re: [fossil-users] .svg files in .wiki, could one of embed, object or iframe be safely added to the allowed html in .wiki files?

[Matt Welland]

The img tag was the first thing I tried, but yes, in a .wiki file. I just
tested it again and confirmed that it doesn't work, then I had the thought
to try on a different machine and sure enough, the browser was the problem
and img does work.

Thanks!

Matt
-=-

On Mon, Aug 29, 2011 at 10:00 PM, Venkat Iyer <ven...@comit.com> wrote:

>
> Matt,
>
> Of late browsers allow SVGs in img tags.  And Fossil has known svg as
> a mime type for quite some time.  (2010-11-07 18:42:46).  I use svgs
> in fossil embedded docs all the time, though I haven't tried it in a
> wiki page.
>
>  - Venkat
>
>
> -----Original Message----- From: Matt Welland <estifo...@gmail.com>
> Sent: Monday, August 29, 2011 21:40:44 Subject: Re: [fossil-users]
> .svg files in .wiki, could one of embed, object or iframe be safely
> added to the allowed html in .wiki files?
>
> On further researching the three possible tags (embed, object and
> iframe) it appears that only iframe was specifically intended to be
> secure and I'm guessing that it isn't considered safe enough for a
> wiki with public access?
>
> To be able to add svg illustrations to fossil wiki docs these are the
> remaining options:
>
> 1. Use the full html option which means losing wiki bullets, lists and
> paragraphing.  2. Export the svg graphics to png files which is a PITA
> 3. Add a build or runtime configurable option to fossil that allows
> certain risky tags.
>
> Any other suggestions?
>
> On Mon, Aug 29, 2011 at 4:03 PM, Matt Welland <estifo...@gmail.com>
> wrote:
>
>    The following when loaded directly by firefox showed the
>    LaTeX_logo.svg but when accessed as
>    http://localhost:8081/doc/ckout/www/AnotherExample.wiki none of
>    the embed, object or iframe tags were recognized.
>
>    % cat AnotherExample.wiki
>    <h2>AnotherExample</h2>
>    <embed src="./LaTeX_logo.svg" type="image/svg+xml" />
>    <object data="./LaTeX_logo.svg" type="image/svg+xml"></object>
>    <iframe src="./LaTeX_logo.svg"></iframe>
>    <h2>This is to test that HTML is working</h2>
>
>    Could one of these be safely added to the allowed html?
>
>    Matt
>    -=-
>
>
>
> ----------------------------------------------------------------------
> _______________________________________________
> fossil-users mailing list
> fossil-users@lists.fossil-scm.org
> http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
> _______________________________________________
> fossil-users mailing list
> fossil-users@lists.fossil-scm.org
> http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
>

_______________________________________________
fossil-users mailing list
fossil-users@lists.fossil-scm.org
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users