7245 today
    GHSA-9wjq-cp2p-hrgf (loofah): SVG `href` attribute bypasses local-reference restriction in Loofah

    GHSA-9wjq-cp2p-hrgf (loofah): SVG `href` attribute bypasses local-reference restriction in Loofah

    21-Jul-2026 1
    Originally appeared on RubySec.## Summary Loofah's HTML5 sanitizer restricted only the xlink:href attribute on certain SVG elements to local, same-document references. Browsers also accept a plain href attribute as an alternative to the deprecated xlink:href per the SVG 2 spec...
    Read more /
    Use coupon code:

    RUBYONRAILS

    to get 30% discount on our bundle!
    Prepare for your next tech interview with our comprehensive collection of programming interview guides. Covering JavaScript, Ruby on Rails, React, and Python, these highly-rated books offer thousands of essential questions and answers to boost your interview success. Buy our 'Ultimate Job Interview Preparation eBook Bundle' featuring 2200+ questions across multiple languages. Ultimate Job Interview Preparation eBook Bundle

    Bestseller

    Ruby Interview Questions

    Tags

    #ruby #rubyonrails #programming #webdev #ghsa-9wjq-cp2p-hrgf #(loofah): #restriction

    Related Links

    Responsibility On Rails
    Basic Design Patterns in Ruby on Rails
    RunRuby.dev brings Ruby programming into your browser
    Catchup subscriptions with Rails Event Store
    How a routine gem update ended up creating $73k worth of subscriptions

    Useful Links

    Quick Links

    Get in Touch

    Ruby On Rails Bosnia

    [email protected]

    [266, 8547, 15469, 16367, 16446, 20842, 20230]

    Ruby On Rails Bosnia © 2016

    Template By HTML Codex