Fallback Safely
Erik Dahlström: Now the only thing that makes me twitch is how planet.intertwingly.net strips out all the svg content from my feed while preserving the ‘object’ element fallback content. It looks absolutely bizarre.
As a policy decision, the Universal Feed Parser strips out all scripts and object tags. Part of my reason for starting Mars was to refactor Venus in such a way that such policy decisions could be surfaced more easily to the application.
That being said, I’m not sure I would want to relax this policy on my planet, even if it were easy to do so. After all, SVG can contain embedded scripts. Venus does, however, support inline SVG, and will sanitize such markup for safety.
P.S. You want to know what makes me twitch? Double escaped titles in feeds.