{"id":37343,"date":"2015-07-03T21:55:28","date_gmt":"2015-07-03T21:55:28","guid":{"rendered":"https:\/\/wordpress.org\/plugins-wp\/safe-svg\/"},"modified":"2026-04-14T13:35:00","modified_gmt":"2026-04-14T13:35:00","slug":"safe-svg","status":"publish","type":"plugin","link":"https:\/\/tw.wordpress.org\/plugins\/safe-svg\/","author":8361946,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"2.4.0","stable_tag":"2.4.0","tested":"7.0","requires":"6.6","requires_php":"7.4","requires_plugins":null,"header_name":"Safe SVG","header_author":"10up","header_description":"","assets_banners_color":"80bee3","last_updated":"2026-04-14 13:35:00","external_support_url":"","external_repository_url":"https:\/\/github.com\/10up\/safe-svg","donate_link":"","header_plugin_uri":"https:\/\/wordpress.org\/plugins\/safe-svg\/","header_author_uri":"https:\/\/10up.com","rating":4.9,"author_block_rating":5,"active_installs":1000000,"downloads":12861745,"num_ratings":77,"support_threads":2,"support_threads_resolved":1,"author_block_count":2,"sections":["description","installation","faq","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"enshrined","date":"2015-07-03 21:55:28"},"1.1.0":{"tag":"1.1.0","author":"enshrined","date":"2015-07-04 13:30:45"},"1.1.1":{"tag":"1.1.1","author":"enshrined","date":"2015-07-06 23:49:00"},"1.2.0":{"tag":"1.2.0","author":"enshrined","date":"2016-02-27 10:55:45"},"1.3.0":{"tag":"1.3.0","author":"enshrined","date":"2016-10-10 14:16:58"},"1.3.1":{"tag":"1.3.1","author":"enshrined","date":"2016-12-01 23:35:44"},"1.3.2":{"tag":"1.3.2","author":"enshrined","date":"2017-02-15 16:03:23"},"1.3.3":{"tag":"1.3.3","author":"enshrined","date":"2017-02-15 16:03:23"},"1.3.4":{"tag":"1.3.4","author":"enshrined","date":"2017-02-21 18:36:11"},"1.4.0":{"tag":"1.4.0","author":"enshrined","date":"2017-02-21 18:36:11"},"1.4.1":{"tag":"1.4.1","author":"enshrined","date":"2017-02-23 17:57:34"},"1.4.2":{"tag":"1.4.2","author":"enshrined","date":"2017-02-26 16:15:41"},"1.4.3":{"tag":"1.4.3","author":"enshrined","date":"2017-03-06 23:30:22"},"1.4.4":{"tag":"1.4.4","author":"enshrined","date":"2017-06-07 00:01:53"},"1.4.5":{"tag":"1.4.5","author":"enshrined","date":"2017-06-18 17:33:49"},"1.5.0":{"tag":"1.5.0","author":"enshrined","date":"2017-06-20 16:21:40"},"1.5.1":{"tag":"1.5.1","author":"enshrined","date":"2017-08-21 14:49:00"},"1.5.2":{"tag":"1.5.2","author":"enshrined","date":"2017-11-15 15:56:42"},"1.5.3":{"tag":"1.5.3","author":"enshrined","date":"2017-11-16 11:27:49"},"1.6.0":{"tag":"1.6.0","author":"enshrined","date":"2017-12-20 22:25:14"},"1.6.1":{"tag":"1.6.1","author":"enshrined","date":"2018-03-17 23:44:45"},"1.7.1":{"tag":"1.7.1","author":"enshrined","date":"2018-10-01 17:41:05"},"1.8.0":{"tag":"1.8.0","author":"enshrined","date":"2018-11-04 13:43:36"},"1.8.1":{"tag":"1.8.1","author":"enshrined","date":"2018-11-22 13:42:25"},"1.9.0":{"tag":"1.9.0","author":"enshrined","date":"2019-01-03 14:18:41"},"1.9.1":{"tag":"1.9.1","author":"enshrined","date":"2019-01-29 00:39:22"},"1.9.10":{"tag":"1.9.10","author":"10up","date":"2022-02-23 18:22:50"},"1.9.2":{"tag":"1.9.2","author":"enshrined","date":"2019-02-14 16:25:49"},"1.9.3":{"tag":"1.9.3","author":"enshrined","date":"2019-02-19 15:46:59"},"1.9.4":{"tag":"1.9.4","author":"enshrined","date":"2019-07-30 16:22:24"},"1.9.5":{"tag":"1.9.5","author":"enshrined","date":"2019-11-04 09:44:16"},"1.9.6":{"tag":"1.9.6","author":"enshrined","date":"2019-11-07 09:29:27"},"1.9.7":{"tag":"1.9.7","author":"enshrined","date":"2020-01-23 22:23:41"},"1.9.8":{"tag":"1.9.8","author":"enshrined","date":"2020-04-17 08:08:45"},"1.9.9":{"tag":"1.9.9","author":"enshrined","date":"2020-05-07 06:44:32"},"2.0.0":{"tag":"2.0.0","author":"10up","date":"2022-04-06 15:19:01"},"2.0.1":{"tag":"2.0.1","author":"10up","date":"2022-04-19 17:41:10"},"2.0.2":{"tag":"2.0.2","author":"10up","date":"2022-06-27 20:54:44"},"2.0.3":{"tag":"2.0.3","author":"10up","date":"2022-09-01 19:50:36"},"2.1.0":{"tag":"2.1.0","author":"10up","date":"2023-03-22 16:56:40"},"2.1.1":{"tag":"2.1.1","author":"10up","date":"2023-04-05 18:53:13"},"2.2.0":{"tag":"2.2.0","author":"10up","date":"2023-08-21 14:29:44"},"2.2.1":{"tag":"2.2.1","author":"10up","date":"2023-10-23 20:40:19"},"2.2.2":{"tag":"2.2.2","author":"10up","date":"2023-11-21 17:30:57"},"2.2.3":{"tag":"2.2.3","author":"10up","date":"2024-03-20 13:34:11"},"2.2.4":{"tag":"2.2.4","author":"10up","date":"2024-03-28 13:41:09"},"2.2.5":{"tag":"2.2.5","author":"10up","date":"2024-07-05 17:42:35"},"2.2.6":{"tag":"2.2.6","author":"10up","date":"2024-11-07 20:56:32"},"2.3.0":{"tag":"2.3.0","author":"10up","date":"2024-11-25 15:20:52"},"2.3.1":{"tag":"2.3.1","author":"10up","date":"2025-04-23 17:13:07"},"2.3.2":{"tag":"2.3.2","author":"10up","date":"2025-07-21 13:49:21"},"2.3.3":{"tag":"2.3.3","author":"10up","date":"2025-08-13 15:22:07"},"2.4.0":{"tag":"2.4.0","author":"10up","date":"2026-04-14 13:35:00"}},"upgrade_notice":{"2.3.2":"<p>Note that this release bumps the WordPress minimum version from 6.5 to 6.6.<\/p>","2.3.0":"<p>Note that this release bumps the WordPress minimum version from 6.4 to 6.5.<\/p>","2.2.6":"<p>Note that this release bumps the WordPress minimum version from 5.7 to 6.4.<\/p>","1.9.10":"<p>Important: bumped the WordPress minimum version from 4.0 to 4.7 and the PHP minimum version from 5.6 to 7.0.<\/p>"},"ratings":{"1":0,"2":1,"3":0,"4":7,"5":69},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":2683939,"resolution":"128x128","location":"assets","locale":""},"icon-256x256.png":{"filename":"icon-256x256.png","revision":2683939,"resolution":"256x256","location":"assets","locale":""},"icon.svg":{"filename":"icon.svg","revision":2779013,"resolution":false,"location":"assets","locale":false}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":2683939,"resolution":"1544x500","location":"assets","locale":""},"banner-772x250.png":{"filename":"banner-772x250.png","revision":2683939,"resolution":"772x250","location":"assets","locale":""}},"assets_blueprints":{"blueprint.json":{"filename":"blueprint.json","revision":3506099,"resolution":false,"location":"assets","locale":"","contents":"{\"$schema\":\"https:\\\/\\\/playground.wordpress.net\\\/blueprint-schema.json\",\"landingPage\":\"\\\/wp-admin\\\/post.php?post=6&action=edit\",\"preferredVersions\":{\"php\":\"7.4\",\"wp\":\"latest\"},\"phpExtensionBundles\":[\"kitchen-sink\"],\"steps\":[{\"step\":\"login\",\"username\":\"admin\",\"password\":\"password\"},{\"step\":\"installPlugin\",\"options\":{\"activate\":true},\"pluginData\":{\"resource\":\"wordpress.org\\\/plugins\",\"slug\":\"safe-svg\"}},{\"step\":\"importFile\",\"file\":{\"resource\":\"url\",\"url\":\"https:\\\/\\\/raw.githubusercontent.com\\\/10up\\\/safe-svg\\\/ec6071406de403e9c9f4b5833abf4e438816df05\\\/.wordpress-org\\\/blueprints\\\/demo-data.xml\"}}]}"}},"all_blocks":{"safe-svg\/svg-icon":{"$schema":"https:\/\/schemas.wp.org\/trunk\/block.json","apiVersion":3,"title":"Safe SVG","description":"Display the SVG icon","textdomain":"safe-svg","name":"safe-svg\/svg-icon","category":"design","attributes":{"svgURL":{"type":"string","default":""},"type":{"type":"string","default":"full"},"alignment":{"type":"string"},"imageID":{"type":"number","default":0},"imageWidth":{"type":"number"},"imageHeight":{"type":"number"},"dimensionWidth":{"type":"number"},"dimensionHeight":{"type":"number"},"imageSizes":{"type":"object"}},"supports":{"html":false,"color":{"text":true,"background":true},"spacing":{"margin":true,"padding":true}},"editorScript":"file:..\/..\/..\/dist\/safe-svg-block.js","style":"file:..\/..\/..\/dist\/safe-svg-block-frontend.css"}},"tagged_versions":["1.0.0","1.1.0","1.1.1","1.2.0","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.4.0","1.4.1","1.4.2","1.4.3","1.4.4","1.4.5","1.5.0","1.5.1","1.5.2","1.5.3","1.6.0","1.6.1","1.7.1","1.8.0","1.8.1","1.9.0","1.9.1","1.9.10","1.9.2","1.9.3","1.9.4","1.9.5","1.9.6","1.9.7","1.9.8","1.9.9","2.0.0","2.0.1","2.0.2","2.0.3","2.1.0","2.1.1","2.2.0","2.2.1","2.2.2","2.2.3","2.2.4","2.2.5","2.2.6","2.3.0","2.3.1","2.3.2","2.3.3","2.4.0"],"block_files":[],"assets_screenshots":[],"screenshots":[],"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[84,3011,600,2904,2905],"plugin_category":[54],"plugin_contributors":[77761,87454,183658],"plugin_business_model":[216239],"class_list":["post-37343","plugin","type-plugin","status-publish","hentry","plugin_tags-media","plugin_tags-mime","plugin_tags-security","plugin_tags-svg","plugin_tags-vector","plugin_category-security-and-spam-protection","plugin_contributors-10up","plugin_contributors-enshrined","plugin_contributors-jeffpaul","plugin_business_model-community","plugin_committers-10up","plugin_committers-10upbot","plugin_support_reps-ankit-k-gupta","plugin_support_reps-dharm1025","plugin_support_reps-dkotter","plugin_support_reps-enshrined","plugin_support_reps-faisal03","plugin_support_reps-jeffpaul","plugin_support_reps-nomnom99","plugin_support_reps-peterwilsoncc","plugin_support_reps-sumitbagthariya16"],"banners":{"banner":"https:\/\/ps.w.org\/safe-svg\/assets\/banner-772x250.png?rev=2683939","banner_2x":"https:\/\/ps.w.org\/safe-svg\/assets\/banner-1544x500.png?rev=2683939","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":"https:\/\/ps.w.org\/safe-svg\/assets\/icon.svg?rev=2779013","icon":"https:\/\/ps.w.org\/safe-svg\/assets\/icon.svg?rev=2779013","icon_2x":false,"generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>Safe SVG is the best way to Allow SVG Uploads in WordPress!<\/p>\n\n<p>It gives you the ability to allow SVG uploads whilst making sure that they're sanitized to stop SVG\/XML vulnerabilities affecting your site.  It also gives you the ability to preview your uploaded SVGs in the media library in all views.<\/p>\n\n<h4>Current Features<\/h4>\n\n<ul>\n<li><strong>Sanitised SVGs<\/strong> - Don't open up security holes in your WordPress site by allowing uploads of unsanitised files.<\/li>\n<li><strong>SVGO Optimisation<\/strong> - Runs your SVGs through the SVGO tool on upload to save you space. This feature is disabled by default but can be enabled by adding the following code: <code>add_filter( 'safe_svg_optimizer_enabled', '__return_true' );<\/code><\/li>\n<li><strong>View SVGs in the Media Library<\/strong> - Gone are the days of guessing which SVG is the correct one, we'll enable SVG previews in the WordPress media library.<\/li>\n<li><strong>Choose Who Can Upload<\/strong> - Restrict SVG uploads to certain users on your WordPress site or allow anyone to upload.<\/li>\n<\/ul>\n\n<p>Initially a proof of concept for <a href=\"https:\/\/core.trac.wordpress.org\/ticket\/24251\">#24251<\/a>.<\/p>\n\n<p>SVG Sanitization is done through the following library: <a href=\"https:\/\/github.com\/darylldoyle\/svg-sanitizer\">https:\/\/github.com\/darylldoyle\/svg-sanitizer<\/a>.<\/p>\n\n<p>SVG Optimization is done through the following library: <a href=\"https:\/\/github.com\/svg\/svgo\">https:\/\/github.com\/svg\/svgo<\/a>.<\/p>\n\n<!--section=installation-->\n<p>Install through the WordPress directory or download, unzip and upload the files to your <code>\/wp-content\/plugins\/<\/code> directory<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id=\"can%20we%20change%20the%20allowed%20attributes%20and%20tags%3F\"><h3>Can we change the allowed attributes and tags?<\/h3><\/dt>\n<dd><p>Yes, this can be done using the <code>svg_allowed_attributes<\/code> and <code>svg_allowed_tags<\/code> filters.\nThey take one argument that must be returned. See below for examples:<\/p>\n\n<pre><code>add_filter( 'svg_allowed_attributes', function ( $attributes ) {\n\n    \/\/ Do what you want here...\n\n    \/\/ This should return an array so add your attributes to\n    \/\/ to the $attributes array before returning it. E.G.\n\n    $attributes[] = 'target'; \/\/ This would allow the target=\"\" attribute.\n\n    return $attributes;\n} );\n\n\nadd_filter( 'svg_allowed_tags', function ( $tags ) {\n\n    \/\/ Do what you want here...\n\n    \/\/ This should return an array so add your tags to\n    \/\/ to the $tags array before returning it. E.G.\n\n    $tags[] = 'use'; \/\/ This would allow the &lt;use&gt; element.\n\n    return $tags;\n} );\n<\/code><\/pre><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>2.4.0 - 2025-09-22<\/h4>\n\n<ul>\n<li><strong>Added:<\/strong> Ability to upload SVGs from more admin locations (props <a href=\"https:\/\/github.com\/stormrockwell\">@stormrockwell<\/a>, <a href=\"https:\/\/github.com\/darylldoyle\">@darylldoyle<\/a>, <a href=\"https:\/\/github.com\/wpexplorer\">@wpexplorer<\/a>, <a href=\"https:\/\/github.com\/smerriman\">@smerriman<\/a>, <a href=\"https:\/\/github.com\/jeffpaul\">@jeffpaul<\/a>, <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/279\">#279<\/a>).<\/li>\n<li><strong>Changed:<\/strong> Added <code>$attachment_id<\/code> argument to filters <code>safe_svg_use_width_height_attributes<\/code> and <code>safe_svg_dimensions<\/code> (props <a href=\"https:\/\/github.com\/roborourke\">@roborourke<\/a>, <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/278\">#278<\/a>).<\/li>\n<li><strong>Fixed:<\/strong> Inconsistent or incorrect data type for <code>$svg<\/code> argument in the filters <code>safe_svg_use_width_height_attributes<\/code> and <code>safe_svg_dimensions<\/code> (props <a href=\"https:\/\/github.com\/roborourke\">@roborourke<\/a>, <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/278\">#278<\/a>).<\/li>\n<\/ul>\n\n<h4>2.3.3 - 2025-08-13<\/h4>\n\n<ul>\n<li><strong>Security:<\/strong> Update the <code>enshrined\/svg-sanitize<\/code> package from <code>0.19.0<\/code> to <code>0.22.0<\/code> to fix an issue with case-insensitive attributes slipping through the sanitiser and address PHP 8.4 deprecation warnings (props <a href=\"https:\/\/github.com\/darylldoyle\">@darylldoyle<\/a>, <a href=\"https:\/\/github.com\/sudar\">@sudar<\/a>, <a href=\"https:\/\/github.com\/georgestephanis\">@georgestephanis<\/a>, <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a>, <a href=\"https:\/\/github.com\/realazizk\">@realazizk<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/268\">#268<\/a>, <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/272\">#272<\/a>).<\/li>\n<li><strong>Security:<\/strong> Bump <code>form-data<\/code> from 4.0.0 to 4.0.4 (props <a href=\"https:\/\/github.com\/apps\/dependabot\">@dependabot<\/a>, <a href=\"https:\/\/github.com\/faisal-alvi\">@faisal-alvi<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/270\">#270<\/a>).<\/li>\n<li><strong>Security:<\/strong> Bump <code>tmp<\/code> from 0.2.3 to 0.2.5 and <code>@inquirer\/editor<\/code> from 4.2.9 to 4.2.16 (props <a href=\"https:\/\/github.com\/apps\/dependabot\">@dependabot<\/a>, <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/271\">#271<\/a>).<\/li>\n<\/ul>\n\n<h4>2.3.2 - 2025-07-21<\/h4>\n\n<ul>\n<li><strong>Fixed:<\/strong> Visual parity between the front end and the block editor (props <a href=\"https:\/\/github.com\/s3rgiosan\">@s3rgiosan<\/a>, <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/261\">#261<\/a>, <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/266\">#266<\/a>).<\/li>\n<li><strong>Changed:<\/strong> Bump WordPress \"tested up to\" version 6.8 (props <a href=\"https:\/\/github.com\/godleman\">@godleman<\/a>, <a href=\"https:\/\/github.com\/jeffpaul\">@jeffpaul<\/a>, <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/251\">#251<\/a>, <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/254\">#254<\/a>).<\/li>\n<li><strong>Changed:<\/strong> Bump WordPress minimum supported version to 6.6 (props <a href=\"https:\/\/github.com\/godleman\">@godleman<\/a>, <a href=\"https:\/\/github.com\/jeffpaul\">@jeffpaul<\/a>, <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/254\">#254<\/a>).<\/li>\n<li><strong>Security:<\/strong> Bump <code>ws<\/code> from 7.5.10 to 8.18.0, <code>@wordpress\/scripts<\/code> from 27.9.0 to 30.6.0, <code>nanoid<\/code> from 3.3.7 to 3.3.8 and <code>mocha<\/code> from 10.2.0 to 11.0.1 (props <a href=\"https:\/\/github.com\/apps\/dependabot\">@dependabot<\/a>, <a href=\"https:\/\/github.com\/peterwilsoncc\">@peterwilsoncc<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/245\">#245<\/a>).<\/li>\n<li><strong>Security:<\/strong> Bump <code>@babel\/runtime<\/code> from 7.23.9 to 7.27.0, <code>axios<\/code> from 1.7.4 to 1.8.4, <code>cookie<\/code> from 0.4.2 to 0.7.1, <code>express<\/code> from 4.21.0 to 4.21.2 and <code>@wordpress\/e2e-test-utils-playwright<\/code> from 0.26.0 to 1.20.0 (props <a href=\"https:\/\/github.com\/apps\/dependabot\">@dependabot<\/a>, <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/250\">#250<\/a>).<\/li>\n<li><strong>Security:<\/strong> Bump <code>http-proxy-middleware<\/code> from 2.0.6 to 2.0.9 (props <a href=\"https:\/\/github.com\/apps\/dependabot\">@dependabot<\/a>, <a href=\"https:\/\/github.com\/iamdharmesh\">@iamdharmesh<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/253\">#253<\/a>).<\/li>\n<li><strong>Security:<\/strong> Bump <code>tar-fs<\/code> from 3.0.8 to 3.0.9 (props <a href=\"https:\/\/github.com\/apps\/dependabot\">@dependabot<\/a>, <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/258\">#258<\/a>).<\/li>\n<li><strong>Security:<\/strong> Bump <code>bytes<\/code> from 3.0.0 to 3.1.2 and <code>compression<\/code> from 1.7.4 to 1.8.1 (props <a href=\"https:\/\/github.com\/apps\/dependabot\">@dependabot<\/a>, <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/265\">#265<\/a>).<\/li>\n<\/ul>\n\n<h4>2.3.1 - 2024-12-05<\/h4>\n\n<ul>\n<li><strong>Fixed:<\/strong> Revert changes made to how we determine custom dimensions for SVGs (props <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a>, <a href=\"https:\/\/github.com\/martinpl\">@martinpl<\/a>, <a href=\"https:\/\/github.com\/subfighter3\">@subfighter3<\/a>, <a href=\"https:\/\/github.com\/smerriman\">@smerriman<\/a>, <a href=\"https:\/\/github.com\/gigatyrant\">@gigatyrant<\/a>, <a href=\"https:\/\/github.com\/jeffpaul\">@jeffpaul<\/a>, <a href=\"https:\/\/github.com\/iamdharmesh\">@iamdharmesh<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/238\">#238<\/a>).<\/li>\n<\/ul>\n\n<h4>2.3.0 - 2024-11-25<\/h4>\n\n<ul>\n<li><strong>Added:<\/strong> New setting that allows large SVG files (roughly 10MB or greater) to be uploaded and sanitized properly (props <a href=\"https:\/\/github.com\/kirtangajjar\">@kirtangajjar<\/a>, <a href=\"https:\/\/github.com\/faisal-alvi\">@faisal-alvi<\/a>, <a href=\"https:\/\/github.com\/darylldoyle\">@darylldoyle<\/a>, <a href=\"https:\/\/github.com\/manojsiddoji\">@manojsiddoji<\/a>, <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/201\">#201<\/a>).<\/li>\n<li><strong>Added:<\/strong> New <code>get_svg_dimensions<\/code> function in order to reduce code duplication (props <a href=\"https:\/\/github.com\/gabriel-glo\">@gabriel-glo<\/a>, <a href=\"https:\/\/github.com\/jeremymoore\">@jeremymoore<\/a>, <a href=\"https:\/\/github.com\/darylldoyle\">@darylldoyle<\/a>, <a href=\"https:\/\/github.com\/iamdharmesh\">@iamdharmesh<\/a>, <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/216\">#216<\/a>).<\/li>\n<li><strong>Changed:<\/strong> Updated the <code>enshrined\/svg-sanitize<\/code> package from 0.16.0 to 0.19.0 to fix a PHP 8.3 compatibility issue (props <a href=\"https:\/\/github.com\/sksaju\">@sksaju<\/a>, <a href=\"https:\/\/github.com\/TylerB24890\">@TylerB24890<\/a>, <a href=\"https:\/\/github.com\/darylldoyle\">@darylldoyle<\/a>, <a href=\"https:\/\/github.com\/rolf-yoast\">@rolf-yoast<\/a>, <a href=\"https:\/\/github.com\/faisal-alvi\">@faisal-alvi<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/214\">#214<\/a>).<\/li>\n<li><strong>Changed:<\/strong> Update how image dimensions are passed in <code>get_image_tag_override<\/code> and <code>one_pixel_fix<\/code> methods (props <a href=\"https:\/\/github.com\/gabriel-glo\">@gabriel-glo<\/a>, <a href=\"https:\/\/github.com\/jeremymoore\">@jeremymoore<\/a>, <a href=\"https:\/\/github.com\/darylldoyle\">@darylldoyle<\/a>, <a href=\"https:\/\/github.com\/iamdharmesh\">@iamdharmesh<\/a>, <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/216\">#216<\/a>).<\/li>\n<li><strong>Changed:<\/strong> Bump WordPress \"tested up to\" version to 6.7 (props <a href=\"https:\/\/github.com\/colinswinney\">@colinswinney<\/a>, <a href=\"https:\/\/github.com\/jeffpaul\">@jeffpaul<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/232\">#232<\/a>, <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/233\">#233<\/a>).<\/li>\n<li><strong>Changed:<\/strong> Bump WordPress minimum from 6.4 to 6.5 (props <a href=\"https:\/\/github.com\/colinswinney\">@colinswinney<\/a>, <a href=\"https:\/\/github.com\/jeffpaul\">@jeffpaul<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/232\">#232<\/a>, <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/233\">#233<\/a>).<\/li>\n<li><strong>Changed:<\/strong> Remove composer dev dependencies from archived project (props <a href=\"https:\/\/github.com\/TylerB24890\">@TylerB24890<\/a>, <a href=\"https:\/\/github.com\/szepeviktor\">@szepeviktor<\/a>, <a href=\"https:\/\/github.com\/peterwilsoncc\">@peterwilsoncc<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/220\">#220<\/a>).<\/li>\n<li><strong>Fixed:<\/strong> Use proper block category for the Safe SVG Icon block (props <a href=\"https:\/\/github.com\/kirtangajjar\">@kirtangajjar<\/a>, <a href=\"https:\/\/github.com\/fabiankaegy\">@fabiankaegy<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/226\">#226<\/a>).<\/li>\n<li><strong>Security:<\/strong> Only allow SVG file types to be uploaded if our sanitizer is able to run on those files (props <a href=\"https:\/\/github.com\/darylldoyle\">@darylldoyle<\/a>, <a href=\"https:\/\/github.com\/xknown\">@xknown<\/a>, <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/228\">#228<\/a>).<\/li>\n<li><strong>Security:<\/strong> Bump <code>webpack<\/code> from 5.90.1 to 5.94.0 (props <a href=\"https:\/\/github.com\/apps\/dependabot\">@dependabot<\/a>, <a href=\"https:\/\/github.com\/peterwilsoncc\">@peterwilsoncc<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/222\">#222<\/a>).<\/li>\n<li><strong>Security:<\/strong> Bump <code>ws<\/code> from 7.5.10 to 8.18.0, <code>serve-static<\/code> from 1.15.0 to 1.16.2 and <code>express<\/code> from 4.19.2 to 4.21.0 (props <a href=\"https:\/\/github.com\/apps\/dependabot\">@dependabot<\/a>, <a href=\"https:\/\/github.com\/Sidsector9\">@Sidsector9<\/a>, <a href=\"https:\/\/github.com\/faisal-alvi\">@faisal-alvi<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/227\">#227<\/a>, <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/230\">#230<\/a>, <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/234\">#234<\/a>).<\/li>\n<\/ul>\n\n<h4>2.2.6 - 2024-08-28<\/h4>\n\n<ul>\n<li><strong>Changed:<\/strong> Bump WordPress \"tested up to\" version to 6.6 (props <a href=\"https:\/\/github.com\/sudip-md\">@sudip-md<\/a>, <a href=\"https:\/\/github.com\/ankitguptaindia\">@ankitguptaindia<\/a>, <a href=\"https:\/\/github.com\/jeffpaul\">@jeffpaul<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/212\">#212<\/a>, <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/213\">#213<\/a>).<\/li>\n<li><strong>Changed:<\/strong> Bump WordPress minimum from 5.7 to 6.4 (props <a href=\"https:\/\/github.com\/sudip-md\">@sudip-md<\/a>, <a href=\"https:\/\/github.com\/ankitguptaindia\">@ankitguptaindia<\/a>, <a href=\"https:\/\/github.com\/jeffpaul\">@jeffpaul<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/212\">#212<\/a>, <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/213\">#213<\/a>).<\/li>\n<li><strong>Security:<\/strong> Add svg sanitization on the <code>wp_handle_sideload_prefilter<\/code> filter (props <a href=\"https:\/\/github.com\/dkotter\">@dkotter<\/a>, <a href=\"https:\/\/github.com\/xknown\">@xknown<\/a>, <a href=\"https:\/\/github.com\/iamdharmesh\">@iamdharmesh<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/security\/advisories\/GHSA-3vr7-86pg-hf4g\">GHSA-3vr7-86pg-hf4g<\/a>).<\/li>\n<li><strong>Security:<\/strong> Bump <code>braces<\/code> from 3.0.2 to 3.0.3, <code>pac-resolver<\/code> from 7.0.0 to 7.0.1, <code>socks<\/code> from 2.7.1 to 2.8.3, <code>ws<\/code> from 7.5.9 to 7.5.10 and remove <code>ip<\/code> (props <a href=\"https:\/\/github.com\/apps\/dependabot\">@dependabot<\/a>, <a href=\"https:\/\/github.com\/Sidsector9\">@Sidsector9<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/206\">#206<\/a>).<\/li>\n<li><strong>Security:<\/strong> Bump <code>axios<\/code> from 1.6.7 to 1.7.4 (props <a href=\"https:\/\/github.com\/apps\/dependabot\">@dependabot<\/a>, <a href=\"https:\/\/github.com\/faisal-alvi\">@faisal-alvi<\/a> via <a href=\"https:\/\/github.com\/10up\/safe-svg\/pull\/218\">#218<\/a>).<\/li>\n<\/ul>\n\n<p><a href=\"https:\/\/github.com\/10up\/safe-svg\/blob\/develop\/CHANGELOG.md\">View historical changelog details here<\/a>.<\/p>","raw_excerpt":"Enable SVG uploads and sanitize them to stop XML\/SVG vulnerabilities in your WordPress website.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/tw.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/37343","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tw.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/tw.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/tw.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=37343"}],"author":[{"embeddable":true,"href":"https:\/\/tw.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/10up"}],"wp:attachment":[{"href":"https:\/\/tw.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=37343"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/tw.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=37343"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/tw.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=37343"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/tw.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=37343"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/tw.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=37343"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/tw.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=37343"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}