SVG as Journal logo not working

[tik-zpid]

Describe the issue or problem
Uploading an SVG as the Journal logo works, but when it’s saved in the public folder its missing its extension (yes, I’ve set the File Explorer to show file extensions) and thus can’t be displayed on the journal webpage. Also the size of the SVG logo being displayed in the backend is tiny. If I upload a png it works just fine.

What application are you using?
OJS 3.5.0.1

Additional information
See screenshots

[asmecher]

Hi @tik-zpid,

SVGs are intentionally not supported at the moment, as they’re hard to secure; see e.g.:

https://github.com/pkp/pkp-lib/issues/9315

Reagrds,
Alec Smecher
Public Knowledge Project Team

[tik-zpid]

Hi Alec,

okay. That’s a pity though. Would have thought considering that this is not in a user-accessible area that SVGs would and should be allowed here, or that at the very least some better error reporting would be in place. At least you still allow SVG in the submission process. We as publishers allow and encourage authors to submit image material also in SVG format, especially diagrams and the like and use them (processed) in HTML galleys.

best

Tina

[asmecher]

Hi @tik-zpid,

It does seem drastic – but the variety and depth of security holes in SVGs is shocking, and firewalling approaches like hosting images from a different domain might work for SaaS vendors, but configuring that will be out of reach of our community.

Thanks,
Alec Smecher
Public Knowledge Project Team