Allow URLS in <color-profile>-tags.

Well, URLs are allowed if the URL is local. At least that's what the message implies to me.

I do not think we want to allow remote / non-local URLs due to security reasons (loading random content from a random server into an SVG).

href attribute <color-profile http://www.w3.org/1999/xlink:href="/usr/share/color/icc/compatiblewithadobergb1998.icc">

That looks rather broken (and like a bug in Inkscape) if http://wiki.inkscape.org/wiki/index.php/Adding_color-profile_element is correct.

In T117362#1772198, @Aklapper wrote:

I do not think we want to allow remote / non-local URLs due to security reasons (loading random content from a random server into an SVG).

AFAIS this is not an URL for downloading, but a URL in the sense of an identifier (so more like a URI). Every SVG contains several of these.

Is that affected SVG somewhere available for download, for inspection?

@DaBPunkt: Ping. This ticket is unlikely to progress without your input. Also, is this problem actually specific to commons?

In T117362#1835493, @Krenair wrote:

@DaBPunkt: Ping. This ticket is unlikely to progress without your input. Also, is this problem actually specific to commons?

What is expected by me? And no, I guess it is valid for all Wikimedia-wikis; but at Commons it is most urgend.

In T117362#1836041, @DaBPunkt wrote:

In T117362#1835493, @Krenair wrote:

@DaBPunkt: Ping. This ticket is unlikely to progress without your input. Also, is this problem actually specific to commons?

What is expected by me? And no, I guess it is valid for all Wikimedia-wikis; but at Commons it is most urgend.

See @Aklapper's comment. Also, from the Commons project description:

Please do not report tasks under this project if the task is not actually specific to Commons but only because you found this problem on Commons. Also see How to report a bug.

In T117362#1836062, @Krenair wrote:

See @Aklapper's comment.

There is a step-by-step in my first post. Of course I can not upload such a file to commons, because of the error.

Also, from the Commons project description:

Please do not report tasks under this project if the task is not actually specific to Commons but only because you found this problem on Commons. Also see How to report a bug.

So remove it.

In T117362#1836379, @DaBPunkt wrote:

There is a step-by-step in my first post. Of course I can not upload such a file to commons, because of the error.

Can you please make an affected SVG somewhere available for inspection?

Confirming.
The line in the SVG file is <color-profile xlink:href="/usr/share/color/icc/colord/AdobeRGB1998.icc" /> but the error message is
href attributes <color-profile http://www.w3.org/1999/xlink:href="/usr/share/color/icc/colord/adobergb1998.icc"> with non-local target (e.g. http://, javascript:, etc) are not allowed in SVG files.

Wondering what concatenates that URL.

Confirming that the warning appears while using Special:Upload.

I'm not sure a reference to a local file (as in a file stored on your computer) should be allowed. It's not really useful to anyone if you reference a color profile but don't include it. I'm not sure librsvg even considers <color-profile>, I've never included it. Even if it did, you'd have to embed the profile as a data: URL, since the only color profile on the thumbnailers is TinyRGB. A reference to a remote file would not be permitted for security reasons. Requiring color profiles to be embedded or not included at all would be consistent with how we treat all other resources in SVG files.

The warning message is definitely broken though.