# Should not flag svg's xmlns property

**URL:** <https://community.sonarsource.com/t/should-not-flag-svgs-xmlns-property/41926>\
**Category:** SonarQube Cloud\
**Tags:** sonarqube-cloud\
**Created:** [April 20, 2021, 3:40am UTC](https://community.sonarsource.com/t/should-not-flag-svgs-xmlns-property/41926 "2021-04-20T03:40:44Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Elisha\_Terada](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/elisha_terada/32/21362_2.png) [@Elisha\_Terada](https://community.sonarsource.com/u/Elisha_Terada)\
**Post date:** [April 20, 2021, 3:40am UTC](https://community.sonarsource.com/t/should-not-flag-svgs-xmlns-property/41926/1 "2021-04-20T03:40:44Z")

</div>

SonarScanner flags the string **[SVG namespace](http://www.w3.org/2000/svg)** with error message **Using http protocol is insecure. Use https instead.**

The URL above used for SVG’s xmlns should not be https, and therefore should not raise Security Hotspots for this, and not require users to go through the flag each time SVG code gets added as part of the source code.

[https://developer.mozilla.org/en-US/docs/Web/SVG/Namespaces\_Crash\_Course](https://developer.mozilla.org/en-US/docs/Web/SVG/Namespaces_Crash_Course)

---

<div class="post-metadata">

**Author:** ![pynicolas](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/pynicolas/32/675_2.png) [@pynicolas](https://community.sonarsource.com/u/pynicolas)\
**Post date:** [April 20, 2021, 7:36am UTC](https://community.sonarsource.com/t/should-not-flag-svgs-xmlns-property/41926/2 "2021-04-20T07:36:23Z")

</div>

Hi!

What’s the rule key for which an issue was raised?  
What’s the language of the file where it was raised?

---

<div class="post-metadata">

**Author:** ![Colin](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/colin/32/55255_2.png) [@Colin](https://community.sonarsource.com/u/Colin)\
**Post date:** [May 3, 2021, 9:26am UTC](https://community.sonarsource.com/t/should-not-flag-svgs-xmlns-property/41926/3 "2021-05-03T09:26:24Z")

</div>

Hey there.

Thanks for the report. You should expect to see these false-positives resolved very soon once [this ticket](https://github.com/SonarSource/SonarJS/issues/2518) is (re)deployed to SonarCloud. This should happen soon (hours to days, not weeks).