parasdev

<p>This plugin allows you to upload SVG images into the WordPress media library, which is not allowed by default.</p>
<p>The plugin includes a basic sanitization method to ensure that only safe elements are retained from uploaded SVGs.</p>


SVG Uploader

Short Description: A simple plugin to upload SVG files securely to WordPress media library.

Erik

<p>This plugin provides a Svg Block to your block editor, this can be used with any svg icon or image (or even a html snippet). Some key features are provided like automatic markup sanitation, optimization (svgo), and small utility to change the color and the markup that will be very useful for you to create variations of your image.</p>
<p>This block has the same controls as the images, but actually the content is xml markup, and you can change it as you like! This allows thousands of possibilities… You will be able to use css animations or js scripts to animate it, change the inner text of the svg, create variations of the same svg.<br />
However, this has the disadvantage that the svg will not be copied into the media library, so if you plan to use the same svg several times (buttons, icons, etc.) you are better off creating a reusable block</p>
<p>From a performance point of view, be aware that the image will not be included as an external resource, but will instead be within the markup of the page, thus making svg even faster than it already is.</p>
<h3>Svg are awesome because:</h3>
<ul>
<li>✌️ Are always super sharp!</li>
<li>🪶 Incredibly lightweight and doesn’t require any additional resize image (you only need one source for all screen sizes and resolutions)</li>
<li>⚡ Increased page performance! Using inline SVGs saves can save dozens of requests and save server download bandwith.</li>
<li>🎉 highly customisable and animatable! Embedded svgs are easy to be animated, just use css!</li>
</ul>
<h4>Security</h4>
<p>Since this plugin doesn’t enable uploads of svg images into media library could be considered safer than all the others that enable the upload.<br />
As if that wasn’t enough Svg’s will be cleaned with DOM purify which indeed is a first class js purifier, those used in php try to mimic how it works.</p>
<p>Svg will be included within the pages as xml fragments, so they will not be processed by imagemagick and cannot be uploaded by anyone from website “side”. Only those with permissions to use the editor will be allowed to ‘upload’ (or rather include) them.</p>
<h4>Inspirations, links</h4>
<p><a href="https://www.slideshare.net/x00mario/the-image-that-called-me" rel="nofollow ugc">Mario Heiderich the-image-that-called-me</a></p>
<p><a href="https://www.fortinet.com/blog/threat-research/scalable-vector-graphics-attack-surface-anatomy" rel="nofollow ugc">Fortinet – Anatomy of Scalable Vector Graphics (Svg) Attack Surface on the Web</a></p>
<h3>Resources</h3>
<ul>
<li>dompurify © 2015 Mario Heiderich, <a href="https://raw.githubusercontent.com/cure53/DOMPurify/main/LICENSE" rel="nofollow ugc">Apache License Version 2.0</a></li>
<li>svgo © 2021 Kir Belevich, <a href="https://raw.githubusercontent.com/svg/svgo/main/LICENSE" rel="nofollow ugc">MIT License</a></li>
</ul>
<h4>Contribute</h4>
<p>We love your input! We want to make contributing to this project as easy and transparent as possible, whether it’s:</p>
<ul>
<li>Reporting a bug</li>
<li>Discussing the current state, features, improvements</li>
<li>Submitting a fix 💯 or a new feature 🎉</li>
</ul>
<p>We use GitHub to host code, to track issues and feature requests, as well as accept pull requests.<br />
By contributing, you agree that your contributions will be licensed under its GPLv3 License.</p>


OH MY Svg

Add any svg to your website with the superpowers of the block editor. Out-of-the-box security and speed optimization!

SVG Uploader vs OH MY Svg