[WordPress] 外掛分享： Svigent SVG Engine

內容簡介

WP SVG Engine 是一款輕量級、現代化且安全的解決方案，讓您在 WordPress 中使用 SVG（可縮放向量圖形）。此外掛透過企業級的 DOM 層級清理，解決了 WordPress 預設限制 SVG 上傳的問題，讓設計美觀且無解析度限制的向量圖形變得安全無虞。

【主要功能】
• 企業級 SVG & SVGZ 清理
• 原生媒體庫預覽修復
• 自動尺寸檢測
• 零負擔前端內嵌
• 智能內存快取
• 角色基礎上傳權限

外掛標籤

開發者團隊

原文外掛簡介

Svigent SVG Engine adds secure SVG support to WordPress. Upload SVG and SVGZ files to the Media Library, and every file is sanitized before it is saved. Then turn any SVG image into inline SVG so you can recolor and animate it with CSS.
WordPress blocks SVG uploads by default because an SVG file is XML and can hide JavaScript, which leads to Cross-Site Scripting (XSS) and XML External Entity (XXE) attacks. Svigent SVG Engine removes those risks on upload, so you can use sharp, lightweight vector logos, icons, and illustrations without opening a security hole.
Key Features

Safe SVG uploads: Every SVG and SVGZ upload is cleaned by the trusted enshrined/svg-sanitize library. Scripts, event handlers, remote references, and dangerous XML entities are stripped before the file reaches your server. Sanitization is always on.
Inline SVG with one CSS class: Add style-svg to an image and the plugin swaps the for real
Inline SVG security: The inliner only loads SVGs from your own site and strips scripts and event handlers again before inserting them.
Media Library previews: Fixes broken or blank SVG thumbnails in the Grid view, List view, and attachment details.
Automatic SVG dimensions: Reads viewBox, width, and height on upload so SVG images keep the right aspect ratio in Gutenberg, page builders, and themes.
SVGZ support: Compressed SVGZ files are decompressed, sanitized, and recompressed, with protection against decompression (“zip bomb”) attacks.
Upload permissions: Allow SVG uploads for Administrators only, or for every role that can upload files.
Fast and lightweight: No jQuery and no external requests. Repeated icons are downloaded once, and new images added by AJAX, sliders, or the block editor are detected automatically.
No raster thumbnails: Skips GD/Imagick thumbnail generation and redundant srcset for SVG files to save disk space.

Works With

Block Editor (Gutenberg) Image and Cover blocks
Elementor, Beaver Builder, Divi, and other page builders
Classic Editor and classic themes
AJAX pagination, infinite scroll, and sliders

Switching From Another SVG Plugin?
Svigent SVG Engine uses the same style-svg class that many SVG plugins use for inline SVG, so existing images keep working. Deactivate your old SVG plugin, activate Svigent SVG Engine, and enable Frontend Inline Rendering in Settings → Svigent SVG Engine.
Privacy
Svigent SVG Engine does not track users, collect data, or connect to any external service.
For Developers

svg_flow_allowed_tags and svg_flow_allowed_attributes: adjust the tags and attributes kept during sanitization.
svg_flow_user_can_upload: decide who can upload SVG files.
svg_flow_inline_allowed_urls: allow the inliner to load SVGs from a CDN.
svg_flow_max_inflated_size: change the maximum decompressed size for SVGZ uploads.
svgflow:inlined: a JavaScript event fired on each SVG after it is inlined.

延伸相關外掛

Gobbert SVG StudioGobbert SVG Studio 是一款強大的 WordPress 外掛，讓使用者...