[dependabot]

Bumps enshrined/svg-sanitize from 1.0.0 to 1.1.0.

Release notes

Sourced from enshrined/svg-sanitize's releases.

1.1.0

This is a security release. Everyone using 1.0.0 or earlier should upgrade. The public API has not changed, but some input is now cleaned differently. See "Changed" below before you upgrade.

It fixes these advisories:

• GHSA-q546-85r6-f39q: in Safari, SMIL animations could change a link's href after sanitizing.
• GHSA-3vh3-jf65-656w: remote references could get past removeRemoteReferences(true).
• GHSA-vjg7-f2wj-gqqh: the 1.0.0 DOCTYPE stripping could be avoided, which brought back the DTD-entity XSS.
• GHSA-94x8-pw3c-6qcq: CSS handling under removeRemoteReferences(true) could be slow, and could throw.
• GHSA-hrwm-vcc9-hcm4: the <use> reference graph could take exponential time, and its limits could be avoided.
• GHSA-cgcm-4g72-hfgw: sanitize() could throw instead of returning false.
• GHSA-2v7c-jx29-jprp: stripping PHP tags took quadratic time.

Security

• Animation elements such as <animateTransform> can no longer change a link's href after sanitizing. Any attributeName that targets an href is removed.

• A document whose DTD would still reach the XML parser is now rejected. That covers DTDs in encodings the pre-parse stripper cannot read, such as UTF-16, and DOCTYPEs hidden inside other DOCTYPEs. An internal DTD in UTF-16 or UTF-32 input is now rejected before parsing, so older libxml can no longer expand its entities first, even with setAllowHugeFiles(true).

• Input that is unsafe to hand to the XML parser is rejected before parsing:

  • an element with more than 4,096 attributes, which libxml before 2.10 parses in quadratic time
  • encodings whose markup is not plain ASCII and cannot be checked first, such as EBCDIC and UTF-7

  The parser also now runs with LIBXML_NONET.

• The <use> limits (useThreshold(), setUseNestingLimit() and loop detection) now measure the document a browser actually renders, both as XML and when the output is inlined in an HTML page. They are applied after tags and attributes are cleaned. They also now cover <use> elements that are nested inside other elements, that carry their own id, or that point at a duplicated id. They read references the way browsers do, including letter case, namespaces, whitespace and percent-encoding. useThreshold() now counts every <use> a reference renders, at every level of a chain, not

... (truncated)

Changelog

Sourced from enshrined/svg-sanitize's changelog.

[1.1.0] - 2026-10-19

This is a security release. Everyone using 1.0.0 or earlier should upgrade. The public API has not changed, but some input is now cleaned differently. See "Changed" below before you upgrade.

It fixes these advisories:

• GHSA-q546-85r6-f39q: in Safari, SMIL animations could change a link's href after sanitizing.
• GHSA-3vh3-jf65-656w: remote references could get past removeRemoteReferences(true).
• GHSA-vjg7-f2wj-gqqh: the 1.0.0 DOCTYPE stripping could be avoided, which brought back the DTD-entity XSS.
• GHSA-94x8-pw3c-6qcq: CSS handling under removeRemoteReferences(true) could be slow, and could throw.
• GHSA-hrwm-vcc9-hcm4: the <use> reference graph could take exponential time, and its limits could be avoided.
• GHSA-cgcm-4g72-hfgw: sanitize() could throw instead of returning false.
• GHSA-2v7c-jx29-jprp: stripping PHP tags took quadratic time.

Security

• Animation elements such as <animateTransform> can no longer change a link's href after sanitizing. Any attributeName that targets an href is removed.

• A document whose DTD would still reach the XML parser is now rejected. That covers DTDs in encodings the pre-parse stripper cannot read, such as UTF-16, and DOCTYPEs hidden inside other DOCTYPEs. An internal DTD in UTF-16 or UTF-32 input is now rejected before parsing, so older libxml can no longer expand its entities first, even with setAllowHugeFiles(true).

• Input that is unsafe to hand to the XML parser is rejected before parsing:

  • an element with more than 4,096 attributes, which libxml before 2.10 parses in quadratic time
  • encodings whose markup is not plain ASCII and cannot be checked first, such as EBCDIC and UTF-7

  The parser also now runs with LIBXML_NONET.

• The <use> limits (useThreshold(), setUseNestingLimit() and loop detection) now measure the document a browser actually renders, both as XML and when the output is inlined in an HTML page. They are applied after tags and attributes are cleaned. They also now cover <use> elements that are nested inside other elements, that carry their own id, or that point at a duplicated id. They read references the way browsers do, including letter case, namespaces, whitespace and percent-encoding. useThreshold() now counts every <use> a reference renders, at every level of a chain, not

... (truncated)

Commits

• 9ba9001 Merge commit from fork
• 7889f57 Release 1.1.0 in the changelog
• 6d83781 Scale timing limits to the machine and run CI without Xdebug
• 00944d2 Remove nodes in linear time on PHP before 8.1
• 6df099c Run the test matrix with PCRE JIT both on and off
• f913e7e Add a security policy
• 102dc53 Target 1.1.0 for this release in the changelog note
• 5a5af24 Check input before parsing and widen the unsafe-URL check
• ef91e23 Close gaps found in the second Codex review
• c934416 Add the 1.0.1 changelog entry and date the 1.0.0 entry
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[pirate-bot]

Plugin build for e44db53 is ready 🛎️!

• Download build
• Download dev