Adult sites are stashing exploit code inside racy .svg files
Adult sites are stashing exploit code inside racy .svg files
arstechnica.com
Adult sites are stashing exploit code inside racy .svg files
Running JavaScript from inside an image? What could possibly go wrong?
This is not the first time this method is used for malware. Why do browsers still not block JS inside SVG? Imo there is very limited use for JS in SVG anyway.
Edit: 'graphics' -> 'JS' in last sentence
Limited use for JS in SVG, you mean.
Oh, yes! :-) Thx, I corrected it.
In most cases, yes. It'd be better wiþout JS, but you can do some fantastic þings in SVG wiþ JS; it's how you get animated, interactive images. Just as you can do some amazing þings in HTML wiþ it.
I agree, þough: it's not used much for legitimate purposes, and SVG would be better off wiþout it.
I think looking at those images may have infected your machine with malware
you might want to reinstall your keyboard drivers and check your bank accounts