svg pfps ftw

comments

you can upload svg avatars, they just get converted to png because xss

so technically every account (except ones with default pfps) is png

pee en jee

i’m pretty sure svgs in <img> tags cannot run scripts and stuff