Scalable Vector Graphics (SVG)
SVG powers icons, logos, charts, and interactive graphics. Because it's XML (not opaque binary), XSS and SSRF via embedded references are real risks in upload pipelines.
What It Defines
XML-based vector image format: paths, shapes, text, gradients, filters, and animation in a single document. Can embed scripts and external references — security-sensitive in untrusted uploads. MIME type: `image/svg+xml`.
Canonical (Normative)
Convenient (Practical)
Publishes web platform specs including CSS, accessibility, security policies, Service Workers, Web App Manifest, and many browser APIs. Also maintains some versioned HTML/DOM specs.
Related Specs
Every upload, download, attachment, and asset pipeline crosses these layers. Misunderstanding header vs envelope causes MIME spoofing bugs, parser differentials, and broken file validation. Start here before diving into individual format specs.
The spec behind every HTML page, form, and browser API. The canonical reference for how browsers actually parse and process HTML.