Enable SVG again at PlantUML integration in secure way

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

• Close this issue

Proposal

SVG support in PlantUML integration has been removed due to security issues (XSS).

However, a customer wants us to revert support for SVG in secure way rather than disabling SVG.

The customer attracted to the SVG format because it is easy to zoom in and out, even for large diagrams. As a workaround, they are using PNG format, but it does not have the advantages that SVG had because PNG is not vector.

Related links:

• GitLab Security Release: 16.2.2, 16.1.3, and 16.0.8 | GitLab
• Ticket from the customer (GitLab internal)