Adult sites are stashing exploit code inside racy .svg files
Adult sites are stashing exploit code inside racy .svg files

arstechnica.com
Adult sites are stashing exploit code inside racy .svg files

Adult sites are stashing exploit code inside racy .svg files
Adult sites are stashing exploit code inside racy .svg files
The site doesn't really explain quite why modern browsers still happily execute javascript from inside an .svg file? It seems like a trivial thing to patch.