diff --git a/composer.json b/composer.json index 7292c381cf..28570652a1 100644 --- a/composer.json +++ b/composer.json @@ -27,7 +27,7 @@ "pixelfear/composer-dist-plugin": "^0.1.4", "pragmarx/google2fa": "^8.0 || ^9.0", "rebing/graphql-laravel": "^9.15", - "rhukster/dom-sanitizer": "^1.0.7", + "rhukster/dom-sanitizer": "^1.0.10", "spatie/blink": "^1.3", "spatie/error-solutions": "^1.0 || ^2.0", "statamic/stringy": "^3.1.2", diff --git a/src/Support/Svg.php b/src/Support/Svg.php index eaedbb92c3..56e1d334ba 100644 --- a/src/Support/Svg.php +++ b/src/Support/Svg.php @@ -20,11 +20,11 @@ public static function sanitize(string $svg, ?DOMSanitizer $sanitizer = null): s { $sanitizer = $sanitizer ?? new DOMSanitizer(DOMSanitizer::SVG); - $svg = $sanitizer->sanitize($svg, [ + $svg = static::sanitizeStyleTags($svg); + + return $sanitizer->sanitize($svg, [ 'remove-xml-tags' => ! Str::startsWith($svg, '