Scalable Vector Grief
I tested eight popular SVG sanitizers and bypassed six of them. In this post, I'll show you how a response header can run JavaScript in Firefox even when the response body is completely harmless XML.
Quick read
A security research blog post demonstrating bypasses against popular SVG sanitizers and how SVG-related features can trigger JavaScript execution in browsers. Someone would visit to learn concrete SVG attack techniques, affected libraries, and browser-specific behaviors to assess or improve security.
- Shows bypasses for six of eight tested SVG sanitizers
- Demonstrates Firefox XSLT-from-Link-header XSS technique
- Shows Safari importing GIFs as SVG to execute scripts
Reactions
No reactions yet. Record a short about this link and it shows up here, in Reels and in the community feed.
Is portswigger.net your site? Sign in to verify it and get a Verified badge, full stats and a link-back badge.
Scalable Vector Grief was shared on NexURLs by Nexis on November 2, 2026, in Tech & AI.
What we found on this site
- Served through
- Amazon CloudFront
- Home page answered in
- 290 ms
- Trackers
- None found
- Ads
- None found
- RSS feed
- Yes
- AI crawlers
- Lets them in
- Set up for phones
- Yes
- Real-visitor speed
- Passes Core Web Vitals
- Popularity
- Top 20,000 domain (Cloudflare)
- Google safety check
- No threats found
- Domain registered
- 2001
- Domain renews
- September 2027
Checked November 2, 2026 from the site’s own code and public records. See how the rest of the web compares in the NexURLs Internet Report.
Quick answers
What is Scalable Vector Grief?
Scalable Vector Grief (portswigger.net): A security research blog post demonstrating bypasses against popular SVG sanitizers and how SVG-related features can trigger JavaScript execution in browsers. Someone would visit to learn concrete SVG attack techniques, affected libraries, and browser-specific behaviors to assess or improve...
Who shared Scalable Vector Grief on NexURLs?
It was shared by Nexis in November 2026. Every link on NexURLs is shared by a real member and passes a safety check before it goes out.
What are some sites like Scalable Vector Grief?
Members found these close to it: SVGOMG, Boxy SVG, NeuralSVG. The full list is on this page under Sites like Scalable Vector Grief.
Sites like Scalable Vector Grief
- SVGOMGjakearchibald.github.io
- Boxy SVGboxy-svg.com
- NeuralSVG: An Implicit Representation for Text-to-Vector Generationsagipolaczek.github.io
- Watdestroyallsoftware.com
A short lightning talk video titled "Wat" by Gary Bernhardt from CodeMash 2012. Visit to watch a humorous...
- Animated ASCII Art Toolascii.rest
This site offers 217 animated ASCII art pieces for web pages. It's a great resource for developers looking to enhance...
- fffuelfffuel.co
fffuel is a curated collection of free SVG generators and color tools for creating gradients, patterns, textures...
More Tech & AI finds
- The Ubuntu 26.04 Rust sudo is not compatible with standard sudoutcc.utoronto.ca
- European RISC-V Industrial Computing Initiativeerici.eu
- Observations from Running stealmybitcoinpavursec.com
- Announcing NetBSD 11.1netbsd.org
- lm_understand-logsgithub.com
- Unauthorized Access to PingCAP Cloud Resourcespingcap.com
Feeling lucky? Try the random website generator.
Where people went next
Nobody has added a next stop yet. Be the first.