Comments (1)
Adding an SVG file to ImageField
seems impossible because SVG file are not supported by the library Pillow, used in ImageField. A way to solve this was to try to create a CustomeImageField model in concrete but that would be ineffective.
Another way is to create CustomFileField, but this doesn't have any interest since we can directly add SVG files in base FileField in concrete.
The issue here is that Django uses the PIL library to validate that uploaded files really are images. SVG files aren't supported by PIL, so we would have to find some other way to validate them.
The bigger concern about SVG files is the potential security issue. SVG files can contain javascript. A big part of the reason we use image fields in the first place is to make sure we're only allowing users to upload "safe" files that we know we can show other users without danger of XSS or other nastiness. SVG files can't make that promise.
So for now, it is better that we do not allow SVG files to be uploaded as part of an ImageField.
source : https://code.djangoproject.com/ticket/14092#comment:1
from concrete-datastore.
Related Issues (20)
- Authorize anonymous creation with throttling
- Add exclude filter HOT 2
- Featuring group stats
- Date filters on creation and modification date fields do not check if the given value is a valid date
- Fix date and datetime filters
- Allow micoseconds for datetime filters
- Python 3.10 support
- AnonymousUser self register
- Create command management for reset password
- authentication by email
- The settings DISABLED_MODELS is obsolete
- Minimum level for update field
- Amelioration de performances sur les permission
- Validate uid tokens for unsubscription views
- Delete old files when updating a file field HOT 1
- Fix UnsupportedMediaType
- Fix create instance with specify uuid from the API
- Ordering sur FK
- Filtering against FK field
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from concrete-datastore.