[tor-bugs] #12827 [Tor Browser]: Create preference to disable SVG

[Tor Bug Tracker & Wiki]

#12827: Create preference to disable SVG
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  mcs
  mikeperry              |     Status:  needs_review
         Type:           |  Milestone:
  enhancement            |    Version:
     Priority:  major    |   Keywords:  tbb-security, tbb-isec-report,
    Component:  Tor      |  tbb-4.5-alpha, TorBrowserTeam201503R
  Browser                |  Parent ID:  #9387
   Resolution:           |
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by mcs):

 Replying to [comment:14 gk]:
 > Do we expect to get the external file type download dialog if SVG can't
 get rendered? See: https://upload.wikimedia.org/wikipedia/commons/6/6c
 /Trajans-Column-lower-animated.svg. If so, what happens if there are
 numerous of these things embedded in websites? Do users get then dozens of
 such dialogs? That would be suboptimal, I guess.

 Yes, for each top-level SVG document that is loaded and for each that is
 in an iframe, an external file download prompt will be displayed. I don't
 think it is common for web pages to use a lot of SVG images in that way,
 but I do not know for sure. Use of <svg> tags inline will not cause a
 prompt to be displayed.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12827#comment:16>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online