Static SVG Source Allowlist Cleaner

How to use Static SVG Source Allowlist Cleaner

Rebuild selected geometric SVG source under a closed allowlist and download a separate file with removal evidence. Remove unsupported active, referenced and presentation source from a small geometric SVG while keeping a precise record of dropped subtree and attribute names. This intentionally destructive source workflow never previews the supplied or rebuilt SVG and does not promise visual preservation or general host-context sanitization.

1. Provide optional small utf-8 svg source, selected geometric svg source.
2. Choose the supported mode and run the tool. Review its assumptions and any reported errors.
3. Copy the result or download a separate output; reset to clear the current form.

Good to know

• One UTF-8 XML source up to 100,000 bytes, with at most 2,500 lexical source elements and 24 element levels before parsing. A quote/comment/CDATA-aware preflight refuses DTD/entity declarations and noninitial or non-XML processing instructions. Only an initial UTF-8 XML declaration is selected.
• The root must be an SVG-namespace svg with an explicit positive four-number viewBox. Selected elements are svg, g, title, desc, path, rect, circle, ellipse, line, polyline and polygon. Only the root may be svg; foreign/unsupported subtrees are removed.
• The closed attribute set contains selected literal geometry, basic/hex paints, opacity and a few stroke/fill rules. No IDs/classes, URLs/references, styles/events, transforms, filters/gradients/masks/clipping, animation, embedded content or text glyphs are retained. Descriptive title/desc text is escaped, not interpreted as markup.
• Selected numeric source uses at most 12 leading digits, six fractional digits and a one-digit exponent magnitude at most six, with absolute values at most one million and property-specific nonnegative/opacity bounds. Unsupported kept geometry values refuse instead of being repaired. Paths require complete selected command groups; arcs require separate literal 0/1 flags.
• Path/point geometry uses at most 10,000 retained tokens; one path is at most 50,000 characters and descriptive text at most 2,000. At least one geometric element must remain. Output is at most 200,000 UTF-8 bytes. Attributes/subtrees can be removed in ways that materially change appearance.
• The browser XML parser is used only to read inert source. A three-second traversal budget is cooperative and cannot forcibly interrupt native parsing. No supplied or rebuilt SVG is mounted, rendered, opened, fetched or executed; the download still needs independent review in its actual host context.
• This is a selected geometric source rebuild, not a complete SVG validator, optimizer, general-purpose sanitizer, malware certification, accessibility audit or proof of visual equivalence. The removal report can expose original element/attribute names but omits their removed values.
• Structured text output is limited to 500,000 characters. Reduce the supplied source when that separate output budget is exceeded.
• Inputs are processed on this device and are not automatically saved or uploaded.