OH MY Svg

This plugin provides a Svg Block to your block editor, this can be used with any svg icon or image (or even a html snippet). Some key features are provided like automatic markup sanitation, optimization (svgo), and small utility to change the color and the markup that will be very useful for you to create variations of your image.

This block has the same controls as the images, but actually the content is xml markup, and you can change it as you like! This allows thousands of possibilities… You will be able to use css animations or js scripts to animate it, change the inner text of the svg, create variations of the same svg.
However, this has the disadvantage that the svg will not be copied into the media library, so if you plan to use the same svg several times (buttons, icons, etc.) you are better off creating a reusable block

From a performance point of view, be aware that the image will not be included as an external resource, but will instead be within the markup of the page, thus making svg even faster than it already is.

Svg are awesome because:

• ✌️ Are always super sharp!
• 🪶 Incredibly lightweight and doesn’t require any additional resize image (you only need one source for all screen sizes and resolutions)
• ⚡ Increased page performance! Using inline SVGs saves can save dozens of requests and save server download bandwith.
• 🎉 highly customisable and animatable! Embedded svgs are easy to be animated, just use css!

Security

Since this plugin doesn’t enable uploads of svg images into media library could be considered safer than all the others that enable the upload.
As if that wasn’t enough Svg’s will be cleaned with DOM purify which indeed is a first class js purifier, those used in php try to mimic how it works.

Svg will be included within the pages as xml fragments, so they will not be processed by imagemagick and cannot be uploaded by anyone from website “side”. Only those with permissions to use the editor will be allowed to ‘upload’ (or rather include) them.

Inspirations, links

Mario Heiderich the-image-that-called-me

Fortinet – Anatomy of Scalable Vector Graphics (Svg) Attack Surface on the Web

Resources

• dompurify © 2015 Mario Heiderich, Apache License Version 2.0
• svgo © 2021 Kir Belevich, MIT License

Contribute

We love your input! We want to make contributing to this project as easy and transparent as possible, whether it’s:

• Reporting a bug
• Discussing the current state, features, improvements
• Submitting a fix 💯 or a new feature 🎉

We use GitHub to host code, to track issues and feature requests, as well as accept pull requests.
By contributing, you agree that your contributions will be licensed under its GPLv3 License.

block link sanitize SVG upload icon Vector blocks