[wp-trac] [WordPress Trac] #24251: Reconsider SVG inclusion to get_allowed_mime_types
    WordPress Trac 
    noreply at wordpress.org
       
    Thu Jun 13 13:31:57 UTC 2019
    
    
  
#24251: Reconsider SVG inclusion to get_allowed_mime_types
---------------------------+------------------------------
 Reporter:  JustinSainton  |       Owner:  (none)
     Type:  enhancement    |      Status:  reopened
 Priority:  normal         |   Milestone:  Awaiting Review
Component:  Upload         |     Version:
 Severity:  normal         |  Resolution:
 Keywords:  early          |     Focuses:
---------------------------+------------------------------
Comment (by korwinus):
 Replying to [comment:84 Ninos Ego]:
 > As administrator it definitely should work. An admin can also edit the
 theme- and plugin code with the integrated editor on dashboard. So there's
 no argument disabling svg for security reasons.
 Yeah exactly. People here talk about security and admin user can
 edit/install plugins and theme files directly from admin? Thats not
 security risk? I think its more secure to disallow these functions and
 install Safe SVG plugin. Who the hell is editing files directly from
 administration? No one, just hackers.
-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/24251#comment:88>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
    
    
More information about the wp-trac
mailing list