darylldoyle/svg-sanitizer

Check out mask-type attribute

Opened this issue · 1 comments

Can the mask-type attribute be added with no vulns?

Style property mask-type and node <mask> seem to be okay when using a strict allow-list of possible attributes/properties/values.

https://developer.mozilla.org/en-US/docs/Web/CSS/mask-type