Strict closed-profile validation (spec.md:185, comparison-design.md §6.2 item
1): the prescan above, then a strict parse and the entviz grammar. true only
for the exact document shape a conformant renderer emits.
A flat tag whitelist is NOT enough and was the substance of security finding
F1: every element of an opaque cover, a duplicate cell, a <defs>-hidden cell
group or a second glyph inside a cell is inside the vocabulary. What rejects
them is the structure — see svg-profile.ts.
Strict closed-profile validation (spec.md:185, comparison-design.md §6.2 item 1): the prescan above, then a strict parse and the entviz grammar.
trueonly for the exact document shape a conformant renderer emits.A flat tag whitelist is NOT enough and was the substance of security finding F1: every element of an opaque cover, a duplicate cell, a
<defs>-hidden cell group or a second glyph inside a cell is inside the vocabulary. What rejects them is the structure — see svg-profile.ts.