Author: dbenbenn

Description:
Currently, MediaWiki will produce a thumbnail of an SVG file up to the larger of
1024px or the "natural size" of the SVG. This is sort of a security hole, since
SVG files can have arbitrarily large "natural size" without affecting the file
size at all. See, for example,
[[Image:Map of Colorado counties, blank.svg]].

I propose there should be a maximum thumbnail size for SVG files; say 2000px or
so. Wikimedia projects certainly never need images larger than this. Then code
like [[Image:Foo.svg]] with no size specification would use the 2000px
thumbnail, instead of trying to make a gigantic thumbnail at the "natural size".

Version: 1.6.x
Severity: normal