Enterprise Client Community

(from mail conversations...)

Some of your did send the message that some SVG icons are not visible anymore when using ".ccsvg".

First the reason...: ".ccsvg" reads the original ".svg" and applies certain changes (e.g. updates the size and the color), so that you can dynamically use the same ".svg" icon for different size/color scenarios.

With update 20220327 we extended the parsing of the ".svg" in order to support a different type of flat icons - and now did the first time a "real XML parsing" of the ".svg" content. Before we only did "stupid String searches"...

So, we now parse the SVG content - and use our default parser. This parser is configured from security point of view in a way that it never follows/opens up links to external servers during parsing - and exatctly this happend when parsind certain SVG content:

Code:

 ...
 <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
 ...

The result was: an error was thrown during the parsing and the corresponding ".ccsvg" icon was not created as result.

With 20230605 we encapsulated the parsing in some try/catch and only output an info log message anymore. The creation of the generated SVG still works fine in nearly all cases... (except the new control library that we made the change for).

With the next update we will explicitly remove the critical content from the SVG prior to parsing.