diff --git a/files/en-us/web/svg/element/use/index.md b/files/en-us/web/svg/element/use/index.md index cd6ce905ccb4767..855e008bf886abf 100644 --- a/files/en-us/web/svg/element/use/index.md +++ b/files/en-us/web/svg/element/use/index.md @@ -36,7 +36,7 @@ svg { ## Attributes - {{SVGAttr("href")}} - - : The URL to an element/fragment that needs to be duplicated.
_Value type_: [**``**](/en-US/docs/Web/SVG/Content_type#url) ; _Default value_: none; _Animatable_: **yes** + - : The URL to an element/fragment that needs to be duplicated. See [Usage notes](#usage_notes) for details on common pitfalls.
_Value type_: [**``**](/en-US/docs/Web/SVG/Content_type#url) ; _Default value_: none; _Animatable_: **yes** - {{SVGAttr("xlink:href")}} {{Deprecated_Inline}} - : An [``](/en-US/docs/Web/SVG/Content_type#iri) reference to an element/fragment that needs to be duplicated. If both {{SVGAttr("href")}} and {{SVGAttr("xlink:href")}} are present, the value given by {{SVGAttr("href")}} is used.
_Value type_: [**``**](/en-US/docs/Web/SVG/Content_type#iri) ; _Default value_: none; _Animatable_: **yes** - {{SVGAttr("x")}} @@ -78,9 +78,13 @@ Since the cloned nodes are not exposed, care must be taken when using [CSS](/en- For security reasons, browsers may apply the [same-origin policy](/en-US/docs/Web/Security/Same-origin_policy) on `use` elements and may refuse to load a cross-origin URL in the {{SVGAttr("href")}} attribute. There is currently no defined way to set a cross-origin policy for `use` elements. +> **Warning:** Loading resources with data URIs in the `href` attribute is deprecated for security reasons. +> This applies to ` **Warning:** Since SVG 2, the {{SVGAttr("xlink:href")}} attribute is deprecated in favor of {{SVGAttr("href")}}. See {{SVGAttr("xlink:href")}} page for more information. -{{svginfo}} +{{SVGInfo}} ## Specifications