XSS Through SVG File Uploads - How to fix - PHP
Hey everyone,
In this video, I am demonstrating the PHP image uploader SVG XSS exploit and showing you how easy it is to fix this issue.
Websites that allow users to upload SVG images and do not clean those SVG files are automatically exposed to this issue.
For that, you'd need to either stop accepting SVG file uploads, or clean those SVG images when you process them in the backend.
This is the PHP library that helps clean malicious JS code from SVG files: https://github.com/darylldoyle/svg-sa...
📝 Article about this video
https://grohsfabian.com/xss-through-s...
📚Personal blog
https://grohsfabian.com
🔥 My affiliate links if you want to support me
DigitalOcean Hosting - https://l.grohsfabian.com/digitalocean (Get $100 in usable credit)
Namecheap Domains - https://l.grohsfabian.com/namecheap
🔗 Other links
Udemy: https://www.udemy.com/user/grohs-fabian/
Twitter: / grohsfabian
Unsplash: https://unsplash.com/@grohsfabian
Chapters
0:00 Intro
0:33 XSS example
1:17 How does it work?
1:58 Fixing the vulnerability
4:33 Testing the fix
5:19 Outro
#php #svg #xss