SVG sanitizer & sandboxed preview
See what an SVG is trying to do — scripts, handlers, external references, trackers — then get a sanitized copy that cannot fetch or run anything. Output is text by default; the preview is opt-in and fully sandboxed.
- No promise of pixel-perfect survival — removed filters or styles mean the sanitized file may draw differently.
- Internal fragment references (#id) survive; every external reference is stripped, including data: URIs.
- Sanitizing runs on the main thread with DOMPurify and the browser's own XML parser — no worker needed, nothing uploaded.
Nothing in yet
Paste, drop, or type to begin. Everything stays on this device.
paste or drop an SVG to see what it carries