1
2

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?

More than 5 years have passed since last update.

🌏【Chrome】svg画像がブロックされたときはsanitizeする

Last updated at Posted at 2020-02-11

環境

Google Chrome バージョン: 79.0.3945.130(Official Build)

やりたいこと

imgタグでsvgを表示したいが、chromeで下記エラーとなり表示されない

Cross-Origin Read Blocking (CORB) blocked cross-origin response https://hogehoge/fuga.svg with MIME type text/plain. See https://www.chromestatus.com/feature/5629709824032768 for more details.

See https://www.chromestatus.com/feature/5629709824032768 https://www.chromestatus.com/feature/5629709824032768 とあるので内容確認

Cross-Origin Read Blocking (CORB) is an algorithm that can identify and block dubious cross-origin resource loads in web browsers before they reach the web page. CORB reduces the risk of leaking sensitive data by keeping it further from cross-origin web pages. In most browsers, it keeps such data out of untrusted script execution contexts. In browsers with Site Isolation, it can keep such data out of untrusted renderer processes entirely, helping even against side channel attacks like Spectre.

→疑わしいcross-origin resource (オリジン間リソース)をブロックするセキュリティがChrome73から実装されている様子

やったこと

パラメータにsanitize=trueを追加する

<img width="148px" src="https://hogehoge/fuga.svg">

<img width="148px" src="https://hogehoge/fuga.svg?sanitize=true">
1
2
0

Register as a new user and use Qiita more conveniently

  1. You get articles that match your needs
  2. You can efficiently read back useful information
  3. You can use dark theme
What you can do with signing up
1
2

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?