Re: [Django] #14092: ImageField should allow SVG

[Django]

#14092: ImageField should allow SVG
-+-
 Reporter:  graeme   |Owner:  nobody
 Type:  New feature  |   Status:  closed
Component:  Database layer   |  Version:  1.2
  (models, ORM)  |
 Severity:  Normal   |   Resolution:  wontfix
 Keywords:   | Triage Stage:
 |  Someday/Maybe
Has patch:  0|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-

Comment (by Claude Paroz):

 Is there any third-party package that implements that currently, and could
 maybe be considered as a candidate for core integration?

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/01070180eade1e7a-e652cc1c-fe68-4ba4-bd6d-a6cc0f36a34c-00%40eu-central-1.amazonses.com.

Re: [Django] #14092: ImageField should allow SVG

[Django]

#14092: ImageField should allow SVG
-+-
 Reporter:  graeme   |Owner:  nobody
 Type:  New feature  |   Status:  closed
Component:  Database layer   |  Version:  1.2
  (models, ORM)  |
 Severity:  Normal   |   Resolution:  wontfix
 Keywords:   | Triage Stage:
 |  Someday/Maybe
Has patch:  0|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-

Comment (by Graeme Pietersz):

 To do it securely we would probably need to add a dependency - there are
 libraries that can do this (e.g. scour) but I do not know which one would
 be best.

 It could be an optional dependency (as PIL/Pillow already is).

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/01070180e212f1cf-3bd454d0-199a-43e4-9852-3f1a8e640393-00%40eu-central-1.amazonses.com.

Re: [Django] #14092: ImageField should allow SVG

[Django]

#14092: ImageField should allow SVG
-+-
 Reporter:  graeme   |Owner:  nobody
 Type:  New feature  |   Status:  closed
Component:  Database layer   |  Version:  1.2
  (models, ORM)  |
 Severity:  Normal   |   Resolution:  wontfix
 Keywords:   | Triage Stage:
 |  Someday/Maybe
Has patch:  0|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-

Comment (by Carlton Gibson):

 Hi Michael.

 It's marked Someday/Maybe — so, after all this time, an outline (or proof-
 of-concept) of how it's addressable would be enough to move it on.

 * Did PIL/Pillow gain SVG support?
 * Is there another (secure) way forward?

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/01070180d72f7dc6-d4ec5eb8-a1d6-44b4-b048-890e57ff0f08-00%40eu-central-1.amazonses.com.

Re: [Django] #14092: ImageField should allow SVG

[Django]

#14092: ImageField should allow SVG
-+-
 Reporter:  graeme   |Owner:  nobody
 Type:  New feature  |   Status:  closed
Component:  Database layer   |  Version:  1.2
  (models, ORM)  |
 Severity:  Normal   |   Resolution:  wontfix
 Keywords:   | Triage Stage:
 |  Someday/Maybe
Has patch:  0|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-

Comment (by Michael):

 Could this be revisited, as SVG is an essential image format for the web.

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/01070180d722c62c-dfdd4e0f-e2f0-4b3e-a82f-f2333799adec-00%40eu-central-1.amazonses.com.

Re: [Django] #14092: ImageField should allow SVG

[Django]

#14092: ImageField should allow SVG
-+-
 Reporter:  graeme   |Owner:  nobody
 Type:  New feature  |   Status:  closed
Component:  Database layer   |  Version:  1.2
  (models, ORM)  |
 Severity:  Normal   |   Resolution:  wontfix
 Keywords:   | Triage Stage:
 |  Someday/Maybe
Has patch:  0|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-

Comment (by ambivalentno):

 As svg is required more and more often (and sometimes quite unexpectedly),
 I've made a quick workaround (in django-rest-framework context) to have
 PIL-based image validation and minimal svg detection for the same
 FormField:

 https://7webpages.com/blog/how-to-have-svg-allowed-as-an-image-for-django-
 rest-framework/

--
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-updates+unsubscr...@googlegroups.com.
To post to this group, send email to django-updates@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/064.60c22adb8ae9fe603b8283e73d0a7d58%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Re: [Django] #14092: ImageField should allow SVG

[Django]

#14092: ImageField should allow SVG
-+-
 Reporter:  graeme   |Owner:  nobody
 Type:  New feature  |   Status:  closed
Component:  Database layer   |  Version:  1.2
  (models, ORM)  |   Resolution:  wontfix
 Severity:  Normal   | Triage Stage:
 Keywords:   |  Someday/Maybe
Has patch:  0|  Needs documentation:  0
  Needs tests:  0|  Patch needs improvement:  0
Easy pickings:  0|UI/UX:  0
-+-
Changes (by aaugustin):

 * status:  new => closed
 * resolution:   => wontfix


Comment:

 `ImageField` is raster-oriented:
 - it validates common raster formats (JPG and PNG);
 - it denormalizes image width and height.

 There's little in common between raster and vector handling — at least in
 the scope of PIL. And SVGs don't have a width and a height expressed in
 pixel in general. I don't see what ImageField adds to FileField when it
 comes to SVG files.

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Re: [Django] #14092: ImageField should allow SVG

[Django]

#14092: ImageField should allow SVG
---+
  Reporter:  graeme| Owner:  nobody
Status:  new   | Milestone:
 Component:  Database layer (models, ORM)  |   Version:  1.2   
Resolution:|  Keywords:
 Stage:  Someday/Maybe | Has_patch:  0 
Needs_docs:  0 |   Needs_tests:  0 
Needs_better_patch:  0 |  
---+
Changes (by PaulM):

  * needs_better_patch:  => 0
  * stage:  Unreviewed => Someday/Maybe
  * needs_tests:  => 0
  * needs_docs:  => 0

Comment:

 This seems like a reasonable request. However, I don't think it is
 realistic any time in the near future.

 The issue here is that Django uses the PIL library to validate that
 uploaded files really are images. SVG files aren't supported by PIL, so we
 would have to find some other way to validate them.

 The bigger concern about SVG files is the potential security issue. SVG
 files can contain javascript. A big part of the reason we use image fields
 in the first place is to make sure we're only allowing users to upload
 "safe" files that we know we can show other users without danger of XSS or
 other nastiness. SVG files can't make that promise.

 So for now, it is better that we do not allow SVG files to be uploaded as
 part of an ImageField.

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-upda...@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

[Django] #14092: ImageField should allow SVG

[Django]

#14092: ImageField should allow SVG
--+-
 Reporter:  graeme|   Owner:  nobody
   Status:  new   |   Milestone:
Component:  Database layer (models, ORM)  | Version:  1.2   
 Keywords:|   Stage:  Unreviewed
Has_patch:  0 |  
--+-
 A good many browsers now support SVG (and support is planned even for IE),
 so a good many uses of ImageField need SVG support.

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-upda...@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.