SOLVED

Potentially unsafe file blocked (IMAGE/SVG+XML)

Go to solution
Highlighted
Level 1

Potentially unsafe file blocked (IMAGE/SVG+XML)

Hi all,

 

I'm trying to upload some SVG files to the design studio. I have done so with no issues in the past. But now, when I try to do so, I get the warning "Potentially unsafe file blocked (IMAGE/SVG+XML)". Does anyone know what I can do to upload these files?

 

Thank you!

 

EDIT: Solved, there were extra properties on the generated SVG that needed to be deleted.

Tags (1)
2 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted
Level 10 - Community Moderator

Re: Potentially unsafe file blocked (IMAGE/SVG+XML)

Updating to mark as resolved. Per OP:

 


Solved, there were extra properties on the generated SVG that needed to be deleted.


 

View solution in original post

Highlighted
Level 10 - Community Moderator

Re: Potentially unsafe file blocked (IMAGE/SVG+XML)

You can set the file extension (and thus server MIME type) to .xml. This sidesteps the quite bizarre security check.

 

Then embed using an <object> and override the MIME type.

<object type="image/svg+xml" data="https://pages.example.com/rs/123-XOR-456/images/testsvg1.xml" style="min-height:200px;">
</object>

Works in all browsers.

View solution in original post

8 REPLIES 8
Highlighted
Level 10 - Community Moderator

Re: Potentially unsafe file blocked (IMAGE/SVG+XML)

Updating to mark as resolved. Per OP:

 


Solved, there were extra properties on the generated SVG that needed to be deleted.


 

View solution in original post

Highlighted

Re: Potentially unsafe file blocked (IMAGE/SVG+XML)

What extra properties did you have to remove?

If I remove enough so that Marketo doesn't reject it, then the browsers won't display it due to errors (having removed too much).

 

This is really annoying. There needs to be a way to disable this ridiculous error.

Highlighted

Re: Potentially unsafe file blocked (IMAGE/SVG+XML)

I figured out how to make it work:

I had to remove the xlink namespace from the top to get Marketo to like it.

 

From:
<svg version="1.1" viewBox="0 0 356 263" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">

to:

<svg version="1.1" viewBox="0 0 356 263" xmlns="http://www.w3.org/2000/svg">

 

Browsers would then give an error until I removed all the xlink references, such as changing:

<use xlink:href="#path-3"/>

 

to:

<use href="#path-3"/>

 

Highlighted
Level 1

Re: Potentially unsafe file blocked (IMAGE/SVG+XML)

This solution does not work for me. Here is the dead-simple SVG I am using to test this issue:

<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" x="0px" y="0px"
	 width="200px" height="200px" viewBox="0 0 200 200" enable-background="new 0 0 200 200" xml:space="preserve">
<rect fill="#AEAEAE" width="200" height="200"/>
</svg>

 

This must be a new security feature as I have been using SVG in Marketo for years. Any ideas? 

Highlighted
Level 10 - Community Moderator

Re: Potentially unsafe file blocked (IMAGE/SVG+XML)

You can set the file extension (and thus server MIME type) to .xml. This sidesteps the quite bizarre security check.

 

Then embed using an <object> and override the MIME type.

<object type="image/svg+xml" data="https://pages.example.com/rs/123-XOR-456/images/testsvg1.xml" style="min-height:200px;">
</object>

Works in all browsers.

View solution in original post

Highlighted
Level 1

Re: Potentially unsafe file blocked (IMAGE/SVG+XML)

Fantastic! As always, you never fail to impress. Thank you Sanford.

Highlighted
Level 10 - Community Moderator

Re: Potentially unsafe file blocked (IMAGE/SVG+XML)

Awesome, gonna write this up on the blog as it's a handy workaround.

Highlighted
Level 1

Re: Potentially unsafe file blocked (IMAGE/SVG+XML)

What program and save settings did you use for the .svg? I am using Illustrator and have tried uploading to the design studio using different combinations of SVG Profiles, CSS Properties, and have excluded the additional options in the save as menu.