test(svg): escapes script injection characters in escapeXML

Author: Chandraveer7389

lib/svg/generator.test.ts

@@ -1109,6 +1109,9 @@ describe('escapeXML', () => {
     const safe = 'Hello World 123!@#%^*()_+-=[]{}|;:,./?`~';
     expect(escapeXML(safe)).toBe(safe);
   });
+  it('escapes script injection characters <script>&" together', () => {
+    expect(escapeXML('<script>&"')).toBe('&lt;script&gt;&amp;&quot;');
+  });
 });
 
 describe('particleCount', () => {