skills.rest
kreuzberg-dev
kreuzberg-devOFFICIAL
Explore all skills by this author →
WebsiteGitHub

svg-security-hardening

Detect and remove dangerous content from SVG files.

836|66|Updated Feb 3, 2025
Search Tags:#security#validation#sanitization#svg#hardening#script removal
One-click install
npx skills add https://github.com/kreuzberg-dev/html-to-markdown --skill svg-security-hardening
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: svg-security-hardening
Source: https://github.com/kreuzberg-dev/html-to-markdown/tree/main/.ai-rulez/domains/safety-sanitization/skills/svg-security-hardening
Command: npx skills add https://github.com/kreuzberg-dev/html-to-markdown --skill svg-security-hardening

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the security risks associated with processing Scalable Vector Graphics (SVG) files, ensuring that potentially harmful content is neutralized.

Core Features & Use Cases

  • SVG Detection: Identifies SVG elements within content.
  • Dangerous Content Removal: Strips out script tags, JavaScript in style tags, and event handlers (e.g., onload, onclick).
  • URL Validation: Validates xlink:href, href, and image src attributes.
  • Handling Options: Offers choices to strip SVGs entirely, remove scripts/handlers, or extract text content.
  • Fallback: Uses alt text or title as a fallback.

Quick Start

Apply SVG security hardening to the provided SVG content.

Frequently Asked Questions about svg-security-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I remove script tags and event handlers from SVG files?▼

SVG sanitization neutralizes security risks by detecting and removing dangerous content such as script tags, JavaScript in style tags, and event handlers like onload and onclick from SVG elements.

How do I validate URL attributes like xlink:href in SVG elements?▼

Validating URL attributes like xlink:href and href in SVG elements involves checking them for malicious content. SVG security hardening validates these attributes to prevent security vulnerabilities.

What are the options for handling unsafe SVG content?▼

Options for handling unsafe SVG content include stripping SVGs entirely, removing scripts and handlers while keeping the SVG, or extracting text content using alt text or title as a fallback.

Why does processing SVG files pose a security risk?▼

Processing SVG files poses a security risk because they can contain executable scripts, malicious JavaScript in style tags, and event handlers that trigger code execution when rendered in a browser.

Can I extract text content from an SVG instead of removing it entirely?▼

You can extract text content from an SVG instead of removing it entirely. SVG security hardening offers a fallback that extracts text content using the alt text or title attributes of the SVG element.

Related Skills

Explore More Software Engineering Skills→
paolomozpaolomoz

page-decomposition

Analyze webpage sections to identify content sequences and breaking points.

Community
Intermediate
michalparkolamichalparkola
515

article-extractor

Extract article content from URLs and save it as a text file.

Community
Intermediate
ZurybrZurybr

break-filter-js-from-html

Analyze HTML snippets to bypass sanitization filters for XSS testing.

Community
Advanced
kreuzberg-devkreuzberg-dev
836

security-configuration-design

Design a SafetyConfig struct with secure defaults for HTML sanitization and document limits.

Official
Intermediate