External/SnapOtter
1
0
Fork 0
mirror of https://github.com/snapotter-hq/SnapOtter.git synced 2026-08-03 07:46:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: add missing SVG XXE security test fixtures

Browse Source 
The adversarial-security integration test reads two SVG fixture files
that were never committed, causing CI to fail with ENOENT.
This commit is contained in:
SnapOtter
2026-06-07 12:33:15 +08:00
parent 5a32e29b8c
commit 59c9df3f0d
2 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/fixtures/security/svg-xxe-file-read.svg
Vendored
+7
View File
@@ -0,0 +1,7 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE svg [
<!ENTITY xxe SYSTEM "file:///etc/passwd">
]>
<svg xmlns="http://www.w3.org/2000/svg" width="200" height="200">
<text x="10" y="20">&xxe;</text>
</svg>
Side by Side

After

Width:  |  Height:  |  Size: 210 B

tests/fixtures/security/svg-xxe-ssrf.svg
Vendored
+7
View File
@@ -0,0 +1,7 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE svg [
<!ENTITY xxe SYSTEM "http://169.254.169.254/latest/meta-data/">
]>
<svg xmlns="http://www.w3.org/2000/svg" width="200" height="200">
<text x="10" y="20">&xxe;</text>
</svg>
Side by Side

After

Width:  |  Height:  |  Size: 232 B