I am using EE v4 and have set up member groups to limit access to various development tools. For the member group I set up, I gave them access to the File Manager with all rights to upload, edit and delete. The users can upload images fine, however they are not able to upload SVG files. I tested and the Super Admin can upload SVG files perfectly. The restricted account cannot. Is this a known issue? Is there a workaround?
Please advise. Thx.
SVG is XML-based, and is indistinguishable from uploading arbitrary tags to be rendered by the browser, so they will trip XSS filters. If these are known actors uploading SVG, and you have them separated in their own group it should be safe to give them a pass with the xss_clean_member_group_exception
override.
Packet Tide owns and develops ExpressionEngine. © Packet Tide, All Rights Reserved.