Test files › Images › svg-external-entity.svg
Sample SVG file
SVG with a DOCTYPE declaring an external entity pointing at a local file path.
↓ Download svg-external-entity.svg| Filename | svg-external-entity.svg |
| Format | SVG |
| Size | 273 bytes (273 bytes) |
| MIME type | image/svg+xml |
| SHA-256 | 34cb8313af9e13289866d0db78d8173e91532750a8886345e6e637beefa0b53f |
What this file catchesSVG rasterisers backed by a full XML parser with entity resolution left on - a file-disclosure path (XXE) that image-processing code rarely gets audited for.
Download & verify
curl -fsSL -o "svg-external-entity.svg" "https://files.hexaqa.com/image/svg-external-entity.svg"
curl -fsSL "https://files.hexaqa.com/image/svg-external-entity.svg" | sha256sum
# expect: 34cb8313af9e13289866d0db78d8173e91532750a8886345e6e637beefa0b53f