readme.txt 3.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111
  1. === Safe SVG ===
  2. Contributors: enshrined
  3. Donate link: https://wpsvg.com/
  4. Tags: svg, sanitize, upload, sanitise, security, svg upload, image, vector, file, graphic, media, mime
  5. Requires at least: 4.0
  6. Tested up to: 4.9.1
  7. Stable tag: 1.6.1
  8. License: GPLv2 or later
  9. License URI: http://www.gnu.org/licenses/gpl-2.0.html
  10. Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website
  11. == Description ==
  12. Safe SVG is the best way to Allow SVG Uploads in WordPress!
  13. It gives you the ability to allow SVG uploads whilst making sure that they're sanitized to stop SVG/XML vulnerabilities affecting your site.
  14. It also gives you the ability to preview your uploaded SVGs in the media library in all views.
  15. >**[Loving Safe SVG? Try the Pro version for extra features.](https://wpsvg.com/)**
  16. #### Free Features
  17. * **Sanitised SVGs** - Don't open up security holes in your WordPress site by allowing uploads of unsanitised files.
  18. * **View SVGs in the Media Library** - Gone are the days of guessing which SVG is the correct one, we'll enable SVG previews in the WordPress media library.
  19. #### Pro Features
  20. * **SVGO Optimisation** - You'll have the option to run your SVGs through our SVGO server on upload to save you space.
  21. * **Choose Who Can Upload** - Restrict SVG uploads to certain users on your WordPress site or allow anyone to upload.
  22. * **Premium Support** - Pro users get premium support whilst free support is offered in the WordPress forums in our spare time
  23. Initially a proof of concept for [#24251](https://core.trac.wordpress.org/ticket/24251)
  24. SVG Sanitization is done through the following library: [https://github.com/darylldoyle/svg-sanitizer](https://github.com/darylldoyle/svg-sanitizer)
  25. == Installation ==
  26. Install through the WordPress directory or download, unzip and upload the files to your `/wp-content/plugins/` directory
  27. == Changelog ==
  28. = 1.6.1 =
  29. * Images will now use the size chosen when inserted into the page rather than default to 2000px everytime.
  30. = 1.6.0 =
  31. * Fairly big new feature - The library now allows `<use>` elements as long as they don't reference external files!
  32. * You can now also embed safe image types within the SVG and not have them stripped (PNG, GIF, JPG)
  33. = 1.5.3 =
  34. * 1.5.2 introduced an issue that can freeze the media library. This fixes that issue. Sorry!
  35. = 1.5.2 =
  36. * Tested with 4.9.0
  37. * Fixed an issue with SVGs when regenerating media
  38. = 1.5.1 =
  39. * Fix PHP strict standards warning
  40. = 1.5.0 =
  41. * Library update
  42. * role, aria- and data- attributes are now whitelisted to improve accessibility
  43. = 1.4.5 =
  44. * Fixes some issues with defining the size of an SVG.
  45. * Library update
  46. = 1.4.4 =
  47. * SVGs now display as featured images in the admin area
  48. = 1.4.3 =
  49. * WordPress 4.7.3 Compatibility
  50. * Expanded SVG previews in media library
  51. = 1.4.2 =
  52. * Added a check / fix for when mb_* functions are not available
  53. = 1.4.1 =
  54. * Updated underlying library to allow attributes/tags in all case variations
  55. = 1.4.0 =
  56. * Added ability to preview SVG on both grid and list view in the wp-admin media area
  57. * Updated underlying library version
  58. = 1.3.4 =
  59. * A fix for SVGZ uploads failing and not sanitising correctly
  60. = 1.3.3 =
  61. * Allow SVGZ uploads
  62. = 1.3.2 =
  63. * Fix for the mime type issue in 4.7.1. Mad props to @lewiscowles
  64. = 1.3.1 =
  65. * Updated underlying library version
  66. = 1.3.0 =
  67. * Minify SVGs after cleaning so they can be loaded correctly through file_get_contents
  68. = 1.2.0 =
  69. * Added support for camel case attributes such as viewBox
  70. = 1.1.1 =
  71. * Fixed an issue with empty svg elements self-closing
  72. = 1.1.0 =
  73. * Added i18n
  74. * Added da, de ,en, es, fr, nl and ru translations
  75. * Fixed an issue with filename not being pulled over on failed uploads
  76. = 1.0.0 =
  77. * Initial Release