Skip to content

[Bug] Converting HTML to SVG runs code from the html file #532

@iHategithub9000

Description

@iHategithub9000

Describe the bug
you can run code by converting HTML to SVG

To Reproduce
Steps to reproduce the behavior:

  1. create an html file
  2. <img src="x" onerror="document.write('<h1>lorem ipsum dolor sit amet 🔥</h1>')">
  3. convert it to SVG on the website
  4. onerror executes

Expected behavior
it doesnt execute

Screenshots

2026-03-12.17-44-41.mp4

Desktop (please complete the following information):

  • OS: windows 11
  • Browser: tested on chrome
  • Version: tested on 145.0.7632.160

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions