[BZ#761873] Path parser misses some implementation notes
Submitted by Massimo
Link to original bug (#761873)
Description
Created attachment 320901 test case
Opening the attached svg in rsvg-view-3, gimp, eog etc shows NSFW content, whereas opening it in firefox, inkscape, display, surf etc shows SFW content.
The problem is that librsvg does not stop parsing invalid 'd' () attributes
I think this could be easily abused: think of icons showing controversial symbols when used in gtk applications, but not in qt...
Attachment 320901, "test case":
Edited by Federico Mena Quintero