Quote from: jackg on April 18, 2022, 10:33:47 PM

It's possible to hide malicious code in an svg (it's likely scannable and easy to detect but there's probably not much point seen in taking the risk).

A simple way svg can be used for hacking would be by adding a closing svg tag inside the image you've uploaded and then adding your onw html/javascript/php straight after it (you can add a closing svg at the end of that too to get it to be less likely to be detected - I'm posting this as an example because I don't expect it to work ANYWHERE).

Yes and hackers are always trying to find out new ways to scam you so the forum security needs to be updated with it and trying new things in signature space with svg can result in those malicious codes you are talking about.

One google search landed me on stackoverflow results where user received malicious code embedded in JS redirecting him to phising YouTube page that could harm his system .

Quote from: dkbit98 on Today at 10:07:42 AM

Quality of signatures would for sure be much better with vector graphics, but I am not sure if I ever saw a forum that has svg signatures, and I am not sure we even need that.
I think that theymos is trying to reduce all the risks and I don't expect to see any changes with signatures, at least not with current forum software.
You an get very good signatures for your business even now, if you pick a good designer.

The quality can be improved with vector signatures but if the security is compromised so what's the need to do it? Moreover at this time the signatures are looking fine even in the pixelated format and forum is doing quite well in them.Yes i also think there is any vector signature on the forum or any particular thread about it because i have searched it and found nothing related to this.So at this time we are absolutely best without superior quality also with security.