SVG images loaded as <img> elements must not execute scripts per spec. Previously, SVGScriptElement::process_the_script_element() did not check whether scripting was disabled, so script processing was triggered via the children_changed() callback during XML parsing, causing a nested event loop spin. Fix this by: - Disabling scripting on the SVG image's Page - Passing XMLScriptingSupport::Disabled to the XML document builder - Checking is_scripting_disabled() in SVGScriptElement before processing any script element - Logging a diagnostic when SVG XML parsing fails (previously the parse result was silently discarded) |
||
|---|---|---|
| .. | ||
| fonts | ||
| 2x2checkerboard.png | ||
| 50x50-green.svg | ||
| 50x50-red.svg | ||
| checkerboard-background.css | ||
| fail.woff | ||
| HTMLLLinkElement-multiple-rel-keywords.css | ||
| mask-image-100x200.png | ||
| nested-svg.svg | ||
| pass.woff | ||
| rectangle.png | ||
| svg-with-external-script.svg | ||
| svg-with-multiple-scripts.svg | ||
| svg-with-script.svg | ||
| transparent-100x50-blue-100x50.png | ||
| vertical-rect.svg | ||