svgo: SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elements · Teire