svg pfps ftw
you can upload svg avatars, they just get converted to png because xss
True
so technically every account (except ones with default pfps) is png
Peanji
pee en jee
i’m pretty sure svgs in <img> tags cannot run scripts and stuff