SVG script in http

Question

We have an SVG script and i just want to know if it is safe to reference it as http?

var ns = { 'svg': 'http://www.w3.org/2000/svg' };

I have tried making it as https but it breaks my icons. Is it possible to make it https?

the `http` version is the one supplied in Mozilla docs https://developer.mozilla.org/en-US/docs/Web/SVG/Element/script — NappingRabbit, Jan 02 '20 at 19:30
not that I know of, I am pretty sure you can just leave it out. — NappingRabbit, Jan 02 '20 at 20:48
here is some info for you https://stackoverflow.com/questions/18467982/are-svg-parameters-such-as-xmlns-and-version-needed — NappingRabbit, Jan 02 '20 at 20:51

score 1 · Accepted Answer · answered Jan 02 '20 at 22:07

This is a namespace (hint: look at the variable name ns!). This address will not be fetched, it is just used to indicate which specifications have been used to create this SVG markup. So it is safe for it not to be HTTPS since no data will actually be exchanged with this address.

SVG script in http

1 Answers1