loofah: Regular expression denial of service in Loofah's SVG local-reference check · Teire