WP Manifestindependent plugin directory
manifest / media / wp-svg

nitida — SVG Uploads

WordPress plugin: allows SVG uploads and sanitizes every one with enshrined/svg-sanitize, so an uploaded SVG cannot run script. Activate per site.

by nitida · github.com/lintmycode/wp-svg

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/lintmycode/wp-svg/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/lintmycode/wp-svg ↗

nitida/wp-svg

WordPress plugin, installed with Composer and activated per site, that allows SVG uploads and runs every one through an allowlist sanitizer (enshrined/svg-sanitize, the library WordPress VIP and Safe SVG use) before WordPress stores it.

Why not the old svg-upload-support.php

That file (hand-copied to 9 sites from the wp-docker-bedrock starter) refused an SVG only if it contained `