svg/svgo v4.0.2

on GitHub

What's Changed

Security

• removeScripts, remove JavaScript URIs case-insensitively and make <script> handling namespace aware. By @SethFalco

Bug Fixes

• convertColors, skip case-normalization for CSS custom properties. By @SethFalco in #2213
• convertPathData, improve handling of consecutive t commands. By @KTibow in #2156
• convertPathData, safer handling of paths. By @KTibow in #2158
• Improve parsing of negative (or +) arc radii. By @KTibow in #2205
• When converting to a data URI, only encode it as a data URI once. By @johnkenny54 in #2053

Performance

• mergePaths, speed up child node removal. By @mozzie in #2216

Other Changes

• removeAttributesBySelector, log warning and noop if missing parameters. By @KTibow in #2215