HUMAN VERIFICATION REQUIRED ASVS 1.3.4 SVG sanitization (when user_supplied_svg is used)

User-supplied Scalable Vector Graphics (SVG) scriptable content is validated or sanitized to contain only tags and attributes (such as draw graphics) that are safe for the application, e.g., do not contain scripts and foreignObject.