CVE id request: ikiwiki

[Nico Golde <oss-security+ml () ngolde de>]

Hi,
"javascript insertion via svg uris

Ivan Shmakov pointed out that the htmlscrubber allowed data:image/* urls, 
including data:image/svg+xml. But svg can contain javascript, so that is 
unsafe."
http://ikiwiki.info/security/#index30h2

Can someone please assign a CVE id to this?

Cheers
Nico

-- 
Nico Golde - http://www.ngolde.de - nion () jabber ccc de - GPG: 0xA0A0AAAA
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: _bin
Description: