Re: SVG to PNG

Pro Turm <[email protected]> Thu, 12 Nov 2020 12:21:09 +0100
Newsgroups gmane.comp.video.graphicsmagick.help
Message-ID <CADC9rU9p-oP6SnUO9tOPns+kUkTKz2_S4P65xPZa175qKfLdhw@mail.gmail.com>
Thanks. Two questions more:
1) Are there any specific APIs concerning SVG? I couldnt grub any specific
documentation page concerning svg.

2) What is the way to reject the dangerous parts of the svgs or they are
just ignored by GM ?

Am Mo., 9. Nov. 2020 um 18:36 Uhr schrieb Bob Friesenhahn <
[email protected]>:

> On Mon, 9 Nov 2020, Pro Turm wrote:
>
> > Thanks for answering.
> >
> >>  improving support for SVG 1.1 and adding a few missing features such as
> > support for radial gradients
> > Is there any reference of which are the implemented vs. the missing
> > features? How about SVG 1.2 ?
>
> I am not aware of a list of missing features.  I expect that there is
> some support for SVG 1.1.
>
> SVG has become very complicated and new options are added to existing
> reqests.  This means that a simple request which is also compliant
> with SVG 1.2 may work, but adding just one option to the request might
> obtain unexpected behavior.
>
> >> The GraphicsMagick delegates subsystem can support using an external SVG
> > renderer if the user desires that.
> > Could you provide some examples or documentation about it?
>
> It would be done via the existing delegates.mgk file which is a text
> format which allows adding new entries.  There is some documentation
> at the top of the installed delegates.mgk file, and lots of examples
> in the file.
>
> Ultimately, you need to look at your SVG use-cases.  If you plan to
> support arbitrary SVG from the "Web", then GraphicsMagick is likely
> not the best solution.  If the SVG is well managed or locally
> produced, then GraphicsMagick might be a good solution.
>
> SVG is dangerous from a security perspective since a SVG file can
> request to download files from URLs.  Unless the SVG renderer has some
> way to evaluate if a request should be honored (as a SVG
> implementation in a Web browser should do), the SVG files might
> perform requests on hosts on your secure internal network.  A web
> browser might know that the URLs are from the same site where the SVG
> came from, or it may make special allowances for downloading fonts
> from Google.
>
> Bob
> --
> Bob Friesenhahn
> [email protected], http://www.simplesystems.org/users/bfriesen/
> GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/
> Public Key,     http://www.simplesystems.org/users/bfriesen/public-key.txt
>
>
> _______________________________________________
> Graphicsmagick-help mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/graphicsmagick-help
>

_______________________________________________
Graphicsmagick-help mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/graphicsmagick-help