Product Design, Manufacturing & Innovation Resources

SVG 살균제

2D 그래픽, 네트워크 및 웹

무료
다운로드/설치 필요 없음
등록 없음

https://svg.enshrined.co.uk/

SVG 형식은 실행 파일을 포함하여 거의 모든 코드를 포함할 수 있습니다.
So unless you designed it yourself, to verity it before uploading somewhere is a ~ 해야 하다.
이 무료 온라인 도구는 다재다능한 기능이 아닌, 오직 이 기능에만 초점을 맞추고 있습니다. SVG 최적화 도구 저희가 2D 섹션에서도 추천하고 소개하는 제품들입니다.

분야: 웹 개발, 사이버 보안, 그래픽 디자인.

Free alternative to DOMPurify, Scour.

SVG Sanitizer compared with DOMPurify and Scour
SVG 살균제	DOMPurify	Scour
기술적 기반: The page is a playground for the PHP library svg-sanitize by the GitHub user darylldoyle (the library that powers the Safe SVG WordPress plugin). You paste an SVG and the library filters tags and attributes against a whitelist. The library states that its code is largely borrowed from DOMPurify.	기술적 기반: It is a DOM-only XSS sanitizer for HTML, MathML and SVG. It parses the input into a DOM and filters elements and attributes against allow lists. It is the reference design that the PHP library follows.	기술적 기반: It is not a security filter. It rewrites SVG to reduce size by removing metadata, comments and redundant data, so a malicious SVG can pass through it unless it is cleaned by another tool.
입력 및 출력: You paste SVG markup or load a built-in sample, choose a library version (50 versions are listed) and options, then read a diff, the cleaned output, a preview and a list of issues. The version selector helps to check whether an older release let a given file through.	입력 및 출력: It takes an HTML or SVG string, or a DOM node, and returns a clean string or DOM. Output options include whole document, DOM fragment and Trusted Types. Configuration covers allowed tags, forbidden attributes, URI patterns and hooks.	입력 및 출력: It reads an SVG file and writes an optimized SVG, or a compressed .svgz when the output file has that extension. Options control ID shortening, comment removal and indentation.
라이선스와 개방성: The playground links to the library repository and issue tracker. The library is released under GPL-2.0, which matters if you plan to embed it in a non-GPL product.	라이선스와 개방성: Dual-licensed under Apache-2.0 and MPL-2.0, so it can be embedded in most commercial code bases.	라이선스와 개방성: Open source under Apache License 2.0.
플랫폼 및 통합: Browser page for manual checks. For automation, the underlying library installs with Composer as enshrined/svg-sanitize and runs on the server in PHP. It also has a command line scanner script that returns errors as JSON.	플랫폼 및 통합: JavaScript library for browsers, and for Node.js together with a DOM implementation such as jsdom. The maintainers do not recommend happy-dom as safe.	플랫폼 및 통합: Python command line tool installed with pip. The latest release listed on PyPI is 0.38.2, dated November 2020.
유효기간: The author describes the library as an attempt at a decent SVG sanitizer and states that more extensive testing is still needed. The playground invites users to report any SVG that gets through. Remote references are only removed if that option is switched on.	유효기간: Only the latest release receives security support. Results depend on the DOM implementation in use and on the configuration chosen by the integrator.	유효기간: Not designed to detect or block scripts, so it must not be the only protection when handling files from unknown sources.
언제 선택해야 할까요? Choose it to check an uploaded SVG by hand, or to test how the PHP library treats a suspicious file before relying on it in a PHP or WordPress project.	언제 선택해야 할까요? Choose it when untrusted markup is handled in a JavaScript application, in the browser or on a Node.js server.	언제 선택해야 할까요? Choose it to shrink trusted SVG files in a build step, after the content has been vetted with a sanitizer.

다룬 주제: SVG, 새니타이저, 실행 코드, 보안, 검증, 온라인 도구, SVG 최적화 도구, 2D 그래픽, 임베딩, 코드 유효성 검사, 악성코드 방지, 사용자 안전, ISO/IEC 27001, ISO 9001, ISO/IEC 27002, ISO/IEC 27005 및 W3C SVG..

은둔: 저희는 이 도구나 제작자와 관련된 잠재적인 문제점에 대한 피드백을 받지 못했습니다. 하지만 많은 온라인 서비스와 마찬가지로, 사용자는 자신의 데이터를 직접 제공하고 있습니다. 데이터의 중요도에 따라 제작자의 평판과 오용 가능성을 판단하고, 이용 약관을 확인하고 동의할지 여부를 결정하는 것은 사용자의 책임입니다.