Validator

Validator\SafeSvg is a constraint for symfony/validator: the value, a string or a Stringable, is an SVG image the sanitizer keeps whole. Each removal listed is a violation, and the removals past the first 100 are one more; an image refused whole — too large, malformed, not SVG, declaring entities — is one violation. null and the empty string are valid.

use Phil\SvgSanitizer\Validator\SafeSvg;

final class Logo
{
    #[SafeSvg]
    public string $svg = '';
}

The parameters of each violation are {{ removed }} (RemovalReason::describe()), {{ subject }}, {{ line }} and {{ reason }} (the reason's value, such as event_handler). The code is SafeSvg::NOT_ALLOWED_ERROR for a removal and SafeSvg::REFUSED_ERROR for an image refused whole. The violation of the removals past the first 100 has {{ count }} as its only parameter, the same count as its plural, and the code SafeSvg::NOT_ALLOWED_ERROR: a value of a few megabytes gives at most 101 violations.

The policy is the one of the SvgSanitizer given to SafeSvgValidator. Without a service declaration, the validator's factory builds it with the default policy; declare it as a service to use the application's policy, as Installation shows.

A form can validate with SafeSvg and store the image as written, since the sanitizer would keep it whole, or skip the constraint and store what sanitize() returns, telling the author what was removed. An image validated once is still sanitized again when the policy changes: the constraint checks the value against the policy of the moment.