Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I just tried this in a Github readme, it looks like Github removes the JS.

Would be interesting to try to find a hole in this.



There is no hole. The SVG is loaded as an image. If you find a hole, it would be in the browser’s handling of SVG images, which would be a pretty big hole.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: