Skip to main content
Drupal is a registered trademark of Dries Buytaert
Release: OpenID Connect / OAuth client 3.0.0-alpha9 New alpha version released for module openid_connect (3.0.0-alpha9). Usage Milestone: Google Analytics Module google_analytics crossed 1,000 active installs. Release: GraphQL Compose Codegen 1.1.2 Minor update available for module graphql_compose_codegen (1.1.2). Release: Mapy.com 1.1.3 Minor update available for module mapycom (1.1.3). Release: Ckeditor5 entity browser 3.0.3 Minor update available for module ckeditor5_entity_browser (3.0.3). Release: Ckeditor5 entity browser 3.0.1 Minor update available for module ckeditor5_entity_browser (3.0.1). Release: Ckeditor5 entity browser 3.0.2 Minor update available for module ckeditor5_entity_browser (3.0.2). Release: Teamleader Integration 4.0.2 Minor update available for module teamleader (4.0.2). Release: Change Requests 2.1.9 Minor update available for module change_requests (2.1.9). Module Revived: Entityqueue Buttons 1.1.2 Module entityqueue_buttons updated after 8 months of inactivity (1.1.2).

SVG Upload Sanitizer

263 sites No security coverage Drupal 10–11
View on drupal.org

This module automatically sanitizes all uploaded SVG files to improve security. It uses the darylldoyle/svg-sanitizer package to perform the sanitization process.

Introduction

The SVG Upload Sanitizer module provides a simple way to sanitize
uploaded svg.

Every uploaded svg is automatically sanitize.

To sanitize SVG this module rest upon the darylldoyle/svg-sanitizer package.

Requirements

The module requires the following package:

Installation

Install as you would normally install a contributed Drupal module. See: Installing Modules for further information.

Configuration

This module has no opinion regarding the configuration of the darylldoyle/svg-sanitizer package.

The default behavior of darylldoyle/svg-sanitizer is used.

With the current implementation it should already be possible to configure darylldoyle/svg-sanitizer just by decorating the service. For instance to remove references to remote files you just have to call the method provided by darylldoyle/svg-sanitizer like:

# mymodule.services.yml

services:
  mymodule.sanitizer.svg:
    decorates: svg_upload_sanitizer.sanitizer.svg
    class: enshrined\svgSanitize\Sanitizer
    calls:
      - [removeRemoteReferences, [TRUE]]

Similar modules

How to contribute

Issues and Merge requests has to be done on https://gitlab.com/beram-drupal/svg-upload-sanitizer

Maintainers

Depends on

Dependencies of the latest stable release

  • file Drupal core

Required by

Tracked projects that depend on this one

No tracked projects depend on this one yet.

Activity

Tracked releases
4
Tracked since
Jan 2025
Latest release
1 year ago
Releases (12 mo)
0 ▼ from 4
Maintenance
Dormant

Release Timeline

Releases

Version Type Core Release date
8.x-2.1 Stable 10–11 Aug 28, 2025
8.x-2.0 Stable 10–11 Apr 15, 2025
8.x-2.0-alpha1 Pre-release 10–11 Jan 15, 2025
8.x-2.x-dev Dev 10–11 Jan 15, 2025