SVG elements
SVG stands for Scalable Vector Graphics.
SVG defines vector-based graphics in XML format. See HTML5 SVG
<text> element
I love SVG!
<svg height=”30″ width=”200″>
<text x=”0″ y=”15″ fill=”red”>I love SVG!</text>
</svg>
<svg width=”100″ height=”100″>
<circle cx=”50″ cy=”50″ r=”40″ stroke=”green” stroke-width=”4″ fill=”yellow” />
</svg>
*TekP says be aware of attack vulnerabilities in SVG markup though before uploading directly to your web server.
Could an SVG be constructed in such way, that when reading meta data it makes the server unresponsive. and could be used as DoS attack on the server?
What do you mean by metadata? If you are after width and height, you would have to parse the SVG files at least partially to get it; there’s no shortcut of reading a few bytes from the header like there is with many bitmap formats. That brings in the usual risks of XML parsing, such as:
- external entity/DTD-subset inclusion attacks against remote files, local-network sensitive resources, local-machine sensitive files and device-files
- nested entity expansion bombs
- pathologically-nested tag structures might hit recursion resource limits
as a standard precaution you would disable all DTD processing, XInclude, XSL, XSI and entity resolution.
Could an SVG be constructed in such way, that when rendering the SVG on the client, the client becomes unresponsive and potentially makes every users browser on my site crash?
Possibly, but it’s just as possible that could happen with a bitmap format. See eg the corrupt PNG file vulnerabilities of a while back.
More of a concern for SVG files is that they can include JavaScript, which will operate in the security context of the hosting site, so you have cross-site-scripting to worry about.
Actually all types of uploaded file are vulnerable to this, albeit not in such a direct, easy-to-exploit way. In some cases browsers (particularly IE) will content-sniff them, and if they see things that look like tags they may potentially reinterpret them as HTML, including JavaScript. Also there are some side-issues with treating uploaded files as Java applets and Flash policy files.
The standard mitigation for all of these problems is to serve your untrusted resources, whether bitmap, SVG or anything else, from a different domain to your main site: a domain that has no sensitive session (cookie/auth) information in it and no ability to script into your main site’s domain.
Tech Super Models
Ladies making tech content. interesting with original style.
SQL JOINS
In SQL, a join is used to compare and combine — literally join — and return specific rows of data from two or more tables in a database. An inner join finds and returns matching data from tables, while an outer join finds and returns matching data and some dissimilar data from tables.
An inner join on Products returns information about only those products that are common in both tables or ALL Tables combined on based on the join conditions.
Outer Join
An outer join returns a set of records (or rows) that include what an inner join would return but also includes other rows for which no corresponding match is found in the other table.
Sometimes nulls will be produced in this process as some data is shared while other data is not.
Full Outer Join
A full outer join, or full join, which is not supported by the popular MySQL database management system, combines and returns all data from two or more tables, regardless of whether there is shared information. Think of a full join as simply duplicating all the specified information, but in one table, rather than multiple tables. Where matching data is missing, nulls will be produced.
Call of Duty WWII Game
Call of Duty Series is one of the hottest pieces of technology on the planet and oh it just happens be a video game!
Gaming is technology and it is one of the most important and influential areas of technology in our modern world.
MarketPlace Ministry
Technology and Business Applied to Ministry.
Marketplace ministry typically refers to evangelism or other Christian activities that are targeted towards the secular workplace, as opposed to homes, churches, or specialized venues. It can also refer to particular parachurch organizations that focus on such ministry.
Directing and taking evangelism and other Christian activities into the secular marketplace.” TekP says Market Place Ministry is not only being a witness for Christ in and through work or business activies but also applying the wisdom of the scriptures to your efforts in business and secular activities.
Facebook Memories
Sources: iFrame-Apps ; Wiki-How ;
Facebook Memories: On This Day If you want to see your “On this day” activity, simply go to https://www.facebook.com/onthisday. You can turn on notifications to receive alerts when you have memories on the right top corner. You can choose to have notifications for “All Memories”, “Highlights” or “None”.
TekP Humor – Delete Cookies
Tek Humor
Instagram Overview
Understanding the general history and purpose of each of the many social networks in operation today can help make sense of why something like Instagram is different from a network like Pinterest.
Instagram wants you to register with a phone app. it’s also meant for your own pictures rather than other people’s pictures.
Venus Lawrence: How can i post yesterday's memories?
tekp: Can't post for yesterday but to back and see yesterday or a specific date: https://www.facebook.com/help/community/question/?id=10152757381470983 Scroll back just a little…