svgo: SVGO: removeScripts allows executable links through namespace and control-character bypasses · Teire