Skip to content

Comment on Adult sites are stashing exploit code inside svg filesparent

Comments

Thanks! Yes that would work, just like an .html file would work. The advantages of SVG in this case are

- the OS previews it as an image, but on click it opens a website (which to be fair, once you click on a downloaded file, you're already done)

- SVGs are allowed in any "image/*" form, bypassing certain filters

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.