A small library that sanitizes ActiveStorage SVG uploads by stripping any embedded script tags.
Add this line to your application's Gemfile:
gem 'active_storage_svg_sanitizer'Simply including this gem will ensure your svg uploads are sanitized.
This libary uses ActiveJob to perform sanization tasks in the background.
If you'd like to render ActiveSorage svg images in your application, add an initializer that unregisters svg as a binary file type.
# config/initializers/active_storage.rb
ActiveStorage::Engine.config.active_storage.content_types_to_serve_as_binary.delete "image/svg+xml"The gem is available as open source under the terms of the MIT License.