diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..2747591
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,3 @@
+/Tests/ export-ignore
+/.gitattributes export-ignore
+/.gitignore export-ignore
diff --git a/.gitignore b/.gitignore
index a18580d..b35aa4b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,10 +1,13 @@
+.DS_Store
+.build
 .idea/
 /out/
+vendor/
 .idea_modules/
 atlassian-ide-plugin.xml
 com_crashlytics_export_strings.xml
 crashlytics.properties
 crashlytics-build.properties
+composer.lock
 composer.phar
-/vendor/
 
diff --git a/Classes/Hooks/DataHandlerHook.php b/Classes/Hooks/DataHandlerHook.php
new file mode 100644
index 0000000..be9ad6e
--- /dev/null
+++ b/Classes/Hooks/DataHandlerHook.php
@@ -0,0 +1,44 @@
+<?php
+
+namespace T3G\SvgSanitizer\Hooks;
+
+/*
+ * This file is part of the TYPO3 extension svg_sanitizer.
+ *
+ * It is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License, either version 2
+ * of the License, or any later version.
+ *
+ * For the full copyright and license information, please read the
+ * LICENSE.txt file that was distributed with this source code.
+ *
+ * The TYPO3 project - inspiring people to share!
+ */
+
+use T3G\SvgSanitizer\Service\SvgSanitizerService;
+use TYPO3\CMS\Core\DataHandling\DataHandler;
+use TYPO3\CMS\Core\DataHandling\DataHandlerProcessUploadHookInterface;
+use TYPO3\CMS\Core\Utility\GeneralUtility;
+
+/**
+ * Class DataHandlerHook
+ */
+class DataHandlerHook implements DataHandlerProcessUploadHookInterface
+{
+
+    /**
+     * Post-process a file upload.
+     *
+     * @param string $filename The uploaded file
+     * @param DataHandler $parentObject
+     *
+     * @throws \InvalidArgumentException
+     */
+    public function processUpload_postProcessAction(&$filename, DataHandler $parentObject)
+    {
+        $svgService = GeneralUtility::makeInstance(SvgSanitizerService::class);
+        if ($svgService->isSvgFile($filename)) {
+            $svgService->sanitizeSvgFile($filename);
+        }
+    }
+}
diff --git a/Classes/Hooks/GeneralUtilityHook.php b/Classes/Hooks/GeneralUtilityHook.php
new file mode 100644
index 0000000..44f1854
--- /dev/null
+++ b/Classes/Hooks/GeneralUtilityHook.php
@@ -0,0 +1,49 @@
+<?php
+
+namespace T3G\SvgSanitizer\Hooks;
+
+/*
+ * This file is part of the TYPO3 extension svg_sanitizer.
+ *
+ * It is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License, either version 2
+ * of the License, or any later version.
+ *
+ * For the full copyright and license information, please read the
+ * LICENSE.txt file that was distributed with this source code.
+ *
+ * The TYPO3 project - inspiring people to share!
+ */
+
+use T3G\SvgSanitizer\Service\SvgSanitizerService;
+use TYPO3\CMS\Core\DataHandling\DataHandler;
+use TYPO3\CMS\Core\Utility\GeneralUtility;
+
+/**
+ * Class GeneralUtitilityHook
+ * @package T3G\SvgSanitizer\Hooks
+ */
+class GeneralUtilityHook
+{
+
+    /**
+     * Post-process a file upload.
+     *
+     * @param string $filename The uploaded file
+     * @param DataHandler $parentObject
+     *
+     * @throws \InvalidArgumentException
+     */
+    /**
+     * @param array $params
+     * @param mixed $ref
+     */
+    public function processMoveUploadedFile(array &$params, &$ref)
+    {
+        $filename = $params['source'];
+        $svgService = GeneralUtility::makeInstance(SvgSanitizerService::class);
+        if ($svgService->isSvgFile($filename)) {
+            $svgService->sanitizeSvgFile($filename);
+        }
+    }
+}
diff --git a/Classes/Service/SvgSanitizerService.php b/Classes/Service/SvgSanitizerService.php
new file mode 100644
index 0000000..80af18f
--- /dev/null
+++ b/Classes/Service/SvgSanitizerService.php
@@ -0,0 +1,72 @@
+<?php
+
+namespace T3G\SvgSanitizer\Service;
+
+/*
+ * This file is part of the TYPO3 extension svg_sanitizer.
+ *
+ * It is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License, either version 2
+ * of the License, or any later version.
+ *
+ * For the full copyright and license information, please read the
+ * LICENSE.txt file that was distributed with this source code.
+ *
+ * The TYPO3 project - inspiring people to share!
+ */
+
+use enshrined\svgSanitize\Sanitizer;
+use TYPO3\CMS\Core\Type\File\FileInfo;
+use TYPO3\CMS\Core\Utility\ExtensionManagementUtility;
+use TYPO3\CMS\Core\Utility\GeneralUtility;
+
+/**
+ * Class SvgSanitizerService
+ */
+class SvgSanitizerService
+{
+    /**
+     * @param string $fileNameAndPath
+     * @return bool
+     * @throws \InvalidArgumentException
+     */
+    public function isSvgFile($fileNameAndPath)
+    {
+        $fileInfo = GeneralUtility::makeInstance(FileInfo::class, $fileNameAndPath);
+        return \in_array($fileInfo->getMimeType(), ['image/svg+xml', 'application/svg+xml'], true);
+    }
+
+    /**
+     * @param string $fileNameAndPath
+     * @param string $outputFileNameAndPath
+     * @throws \BadFunctionCallException
+     */
+    public function sanitizeSvgFile($fileNameAndPath, $outputFileNameAndPath = null)
+    {
+        if ($outputFileNameAndPath === null) {
+            $outputFileNameAndPath = $fileNameAndPath;
+        }
+        $dirtySVG = file_get_contents($fileNameAndPath);
+        $cleanSVG = $this->sanitizeAndReturnSvgContent($dirtySVG);
+        if ($cleanSVG !== $dirtySVG) {
+            file_put_contents($outputFileNameAndPath, $cleanSVG);
+        }
+    }
+
+    /**
+     * @param string $dirtySVG
+     *
+     * @return string
+     * @throws \BadFunctionCallException
+     */
+    public function sanitizeAndReturnSvgContent($dirtySVG)
+    {
+        $extensionBasePath = ExtensionManagementUtility::extPath('svg_sanitizer');
+        if (!class_exists(Sanitizer::class)) {
+            @include 'phar://' . $extensionBasePath . 'Libraries/enshrined-svg-sanitize.phar/vendor/autoload.php';
+        }
+        $sanitizer = new Sanitizer();
+        $sanitizer->removeRemoteReferences(true);
+        return $sanitizer->sanitize($dirtySVG);
+    }
+}
diff --git a/Classes/Service/UpdateService.php b/Classes/Service/UpdateService.php
new file mode 100644
index 0000000..774371e
--- /dev/null
+++ b/Classes/Service/UpdateService.php
@@ -0,0 +1,56 @@
+<?php
+
+namespace T3G\SvgSanitizer\Service;
+
+/*
+ * This file is part of the TYPO3 extension svg_sanitizer.
+ *
+ * It is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License, either version 2
+ * of the License, or any later version.
+ *
+ * For the full copyright and license information, please read the
+ * LICENSE.txt file that was distributed with this source code.
+ *
+ * The TYPO3 project - inspiring people to share!
+ */
+
+use TYPO3\CMS\Core\Database\ConnectionPool;
+use TYPO3\CMS\Core\Resource\Filter\FileExtensionFilter;
+use TYPO3\CMS\Core\Resource\ResourceFactory;
+use TYPO3\CMS\Core\Utility\GeneralUtility;
+
+class UpdateService
+{
+    public function executeUpdate(): bool
+    {
+        $queryBuilder = GeneralUtility::makeInstance(ConnectionPool::class)
+            ->getQueryBuilderForTable('sys_file_storage');
+        $rows = $queryBuilder
+            ->select('uid')
+            ->from('sys_file_storage')
+            ->where($queryBuilder->expr()->eq('is_writable', 1))
+            ->execute()
+            ->fetchAll();
+
+        $resourceFactory = ResourceFactory::getInstance();
+        foreach ($rows as $row) {
+            $filter = GeneralUtility::makeInstance(FileExtensionFilter::class);
+            $filter->setAllowedFileExtensions(['svg']);
+
+            $storage = $resourceFactory->getStorageObject((int)$row['uid']);
+            $storage->setFileAndFolderNameFilters([[$filter, 'filterFileList']]);
+            $files = $storage->getFilesInFolder($storage->getRootLevelFolder(), 0, 0, true, true);
+
+            $svgSanitizerService = GeneralUtility::makeInstance(SvgSanitizerService::class);
+            foreach ($files as $file) {
+                $oldFileContent = $file->getContents();
+                $newFileContent = $svgSanitizerService->sanitizeAndReturnSvgContent($oldFileContent);
+                if ($oldFileContent !== $newFileContent) {
+                    $file->setContents($newFileContent);
+                }
+            }
+        }
+        return true;
+    }
+}
diff --git a/Classes/SignalSlot/ResourceStorage.php b/Classes/SignalSlot/ResourceStorage.php
new file mode 100644
index 0000000..467f65c
--- /dev/null
+++ b/Classes/SignalSlot/ResourceStorage.php
@@ -0,0 +1,78 @@
+<?php
+
+namespace T3G\SvgSanitizer\SignalSlot;
+
+/*
+ * This file is part of the TYPO3 extension svg_sanitizer.
+ *
+ * It is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License, either version 2
+ * of the License, or any later version.
+ *
+ * For the full copyright and license information, please read the
+ * LICENSE.txt file that was distributed with this source code.
+ *
+ * The TYPO3 project - inspiring people to share!
+ */
+
+use T3G\SvgSanitizer\Service\SvgSanitizerService;
+use TYPO3\CMS\Core\Resource\Driver\DriverInterface;
+use TYPO3\CMS\Core\Resource\FileInterface;
+use TYPO3\CMS\Core\Resource\Folder;
+use TYPO3\CMS\Core\Utility\GeneralUtility;
+
+/**
+ * Class ResourceStorage
+ */
+class ResourceStorage
+{
+
+    /**
+     * @param string $targetFileName
+     * @param Folder $targetFolder
+     * @param string $sourceFilePath
+     * @param \TYPO3\CMS\Core\Resource\ResourceStorage $parentObject
+     * @param DriverInterface $driver
+     *
+     * @throws \InvalidArgumentException
+     */
+    public function preFileAdd(&$targetFileName, $targetFolder, $sourceFilePath, $parentObject, $driver)
+    {
+        $svgService = GeneralUtility::makeInstance(SvgSanitizerService::class);
+        if ($svgService->isSvgFile($sourceFilePath)) {
+            $svgService->sanitizeSvgFile($sourceFilePath);
+        }
+    }
+
+    /**
+     * @param FileInterface $file
+     * @param string $localFilePath
+     *
+     * @throws \InvalidArgumentException
+     */
+    public function preFileReplace($file, $localFilePath)
+    {
+        $svgService = GeneralUtility::makeInstance(SvgSanitizerService::class);
+        if ($svgService->isSvgFile($localFilePath)) {
+            $svgService->sanitizeSvgFile($localFilePath);
+        }
+    }
+
+    /**
+     * @param FileInterface $file
+     * @param string $content
+     *
+     * @throws \InvalidArgumentException
+     */
+    public function postFileSetContents($file, $content)
+    {
+        $svgService = GeneralUtility::makeInstance(SvgSanitizerService::class);
+        if ($svgService->isSvgFile($file->getForLocalProcessing(false))) {
+            $newContent = $svgService->sanitizeAndReturnSvgContent($content);
+            // prevent endless loop because this hook is called again and again and again and...
+            if ($newContent !== $content) {
+                $file->setContents($newContent);
+            }
+        }
+    }
+}
diff --git a/Classes/Updates/v8/SanitizeExistingSVG.php b/Classes/Updates/v8/SanitizeExistingSVG.php
new file mode 100644
index 0000000..38af7ab
--- /dev/null
+++ b/Classes/Updates/v8/SanitizeExistingSVG.php
@@ -0,0 +1,103 @@
+<?php
+
+namespace T3G\SvgSanitizer\Updates\v8;
+
+/*
+ * This file is part of the TYPO3 extension svg_sanitizer.
+ *
+ * It is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License, either version 2
+ * of the License, or any later version.
+ *
+ * For the full copyright and license information, please read the
+ * LICENSE.txt file that was distributed with this source code.
+ *
+ * The TYPO3 project - inspiring people to share!
+ */
+
+use T3G\SvgSanitizer\Service\UpdateService;
+use TYPO3\CMS\Core\Registry;
+use TYPO3\CMS\Core\Utility\GeneralUtility;
+use TYPO3\CMS\Install\Updates\AbstractUpdate;
+
+/**
+ * Class SanitizeExistingSVG
+ */
+class SanitizeExistingSVG extends AbstractUpdate
+{
+    /**
+     * @var string
+     */
+    protected $title = '[EXT:svg_sanitizer] Scan and sanitize existing SVG files in fileadmin folder';
+
+    /**
+     * Checks if an update is needed
+     *
+     * @param string &$description The description for the update
+     * @return bool Whether an update is needed (TRUE) or not (FALSE)
+     */
+    public function checkForUpdate(&$description)
+    {
+        if ($this->isWizardDone()) {
+            return false;
+        }
+        return true;
+    }
+
+    /**
+     * Second step: Ask user to sanitize existing SVG files
+     *
+     * @param string $inputPrefix input prefix, all names of form fields have to start with this. Append custom name in [ ... ]
+     * @return string HTML output
+     */
+    public function getUserInput($inputPrefix)
+    {
+        $markup = [];
+        $markup[] = '<div class="panel panel-danger">';
+        $markup[] = '  <div class="panel-heading">Are you really sure?</div>';
+        $markup[] = '  <div class="panel-body">';
+        $markup[] = '    <p>This upgrade wizard will sanitize all SVG file in the fileadmin folder.</p>';
+        $markup[] = '    <p>This means that the content of your SVG files will be changed. This automatic process can break your SVG files.</p>';
+        $markup[] = '    <p><strong>PLEASE: Create a backup of your SVG files, before starting this wizard!</strong></p>';
+        $markup[] = '    <p>Are you really sure, you want to do this now?</p>';
+        $markup[] = '    <div class="btn-group clearfix" data-toggle="buttons">';
+        $markup[] = '      <label class="btn btn-default active">';
+        $markup[] = '        <input type="radio" name="' . $inputPrefix . '[sanitize]" value="0" checked="checked" /> no, don\'t sanitize';
+        $markup[] = '      </label>';
+        $markup[] = '      <label class="btn btn-default">';
+        $markup[] = '        <input type="radio" name="' . $inputPrefix . '[sanitize]" value="1" /> yes, please sanitize';
+        $markup[] = '      </label>';
+        $markup[] = '    </div>';
+        $markup[] = '  </div>';
+        $markup[] = '</div>';
+        return implode(LF, $markup);
+    }
+
+    /**
+     * Performs the update
+     *
+     * @param array &$databaseQueries Queries done in this update
+     * @param string &$customMessage Custom message
+     *
+     * @return bool
+     * @throws \RuntimeException
+     * @throws \InvalidArgumentException
+     */
+    public function performUpdate(array &$databaseQueries, &$customMessage)
+    {
+        $requestParams = GeneralUtility::_GP('install');
+        if (!isset($requestParams['values']['T3G\SvgSanitizer\Updates\SanitizeExistingSVG']['sanitize'])) {
+            return false;
+        }
+        $sanitize = (int)$requestParams['values']['T3G\SvgSanitizer\Updates\SanitizeExistingSVG']['sanitize'];
+
+        if ($sanitize === 1) {
+            GeneralUtility::makeInstance(UpdateService::class)->executeUpdate();
+        }
+
+        // Mark v9 upgrade wizard also as done (bad hack, but required)
+        GeneralUtility::makeInstance(Registry::class)->set('installUpdate', 'T3G\SvgSanitizer\Updates\v9\SanitizeExistingSVG', 1);
+        $this->markWizardAsDone();
+        return true;
+    }
+}
diff --git a/Classes/Updates/v9/SanitizeExistingSVG.php b/Classes/Updates/v9/SanitizeExistingSVG.php
new file mode 100644
index 0000000..e5ad716
--- /dev/null
+++ b/Classes/Updates/v9/SanitizeExistingSVG.php
@@ -0,0 +1,125 @@
+<?php
+
+namespace T3G\SvgSanitizer\Updates\v9;
+
+/*
+ * This file is part of the TYPO3 extension svg_sanitizer.
+ *
+ * It is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License, either version 2
+ * of the License, or any later version.
+ *
+ * For the full copyright and license information, please read the
+ * LICENSE.txt file that was distributed with this source code.
+ *
+ * The TYPO3 project - inspiring people to share!
+ */
+
+use T3G\SvgSanitizer\Service\UpdateService;
+use TYPO3\CMS\Core\Utility\GeneralUtility;
+use TYPO3\CMS\Install\Updates\ConfirmableInterface;
+use TYPO3\CMS\Install\Updates\Confirmation;
+use TYPO3\CMS\Install\Updates\UpgradeWizardInterface;
+
+/**
+ * Class SanitizeExistingSVG
+ */
+class SanitizeExistingSVG implements UpgradeWizardInterface, ConfirmableInterface
+{
+    protected $confirmation;
+
+    public function __construct()
+    {
+        $this->confirmation = new Confirmation(
+            'Are you really sure?',
+            $this->getDescription(),
+            false,
+            'yes, please sanitize',
+            'no, don\'t sanitize',
+            false
+        );
+    }
+
+    /**
+     * Return the identifier for this wizard
+     * This should be the same string as used in the ext_localconf class registration
+     *
+     * @return string
+     */
+    public function getIdentifier(): string
+    {
+        // this is the origin class name to prevent trouble with class renaming
+        return 'T3G\SvgSanitizer\Updates\SanitizeExistingSVG';
+    }
+
+    /**
+     * Return the speaking name of this wizard
+     *
+     * @return string
+     */
+    public function getTitle(): string
+    {
+        return '[EXT:svg_sanitizer] Scan and sanitize existing SVG files in fileadmin folder';
+    }
+
+    /**
+     * Return the description for this wizard
+     *
+     * @return string
+     */
+    public function getDescription(): string
+    {
+        return 'This upgrade wizard will sanitize all SVG file in the fileadmin folder.'
+            . ' This means that the content of your SVG files will be changed. This automatic process can break your SVG files.'
+            . ' PLEASE: Create a backup of your SVG files, before starting this wizard!'
+            . ' Are you really sure, you want to do this now?';
+    }
+
+    /**
+     * Is an update necessary?
+     *
+     * Is used to determine whether a wizard needs to be run.
+     * Check if data for migration exists.
+     *
+     * @return bool
+     */
+    public function updateNecessary(): bool
+    {
+        return true;
+    }
+
+    /**
+     * Execute the update
+     *
+     * Called when a wizard reports that an update is necessary
+     *
+     * @return bool
+     */
+    public function executeUpdate(): bool
+    {
+        return GeneralUtility::makeInstance(UpdateService::class)->executeUpdate();
+    }
+
+    /**
+     * Returns an array of class names of Prerequisite classes
+     *
+     * This way a wizard can define dependencies like "database up-to-date" or
+     * "reference index updated"
+     *
+     * @return string[]
+     */
+    public function getPrerequisites(): array
+    {
+        return [];
+    }
+
+    /**
+     * Return a confirmation message instance
+     *
+     * @return Confirmation
+     */
+    public function getConfirmation(): Confirmation
+    {
+        return $this->confirmation;
+    }
+}
diff --git a/Libraries/enshrined-svg-sanitize.phar b/Libraries/enshrined-svg-sanitize.phar
new file mode 100755
index 0000000..3fa2287
Binary files /dev/null and b/Libraries/enshrined-svg-sanitize.phar differ
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..40ac914
--- /dev/null
+++ b/README.md
@@ -0,0 +1,58 @@
+# SVG Sanitizer
+
+This extension sanitize every SVG file which is uploaded to the TYPO3 System but only for the default options.
+Please read the following section for all the details carfully.
+
+## Important to know
+
+This extension remove all script and data values in attributes.
+This means, that also an embedded PNG is removed. example:
+
+```
+   // before parser
+   <image width="100" height="100" xlink:href="data:image/png;base64,xxxx"/>
+   // after parser
+   <image width="100" height="100" />
+```
+
+## What this extension does
+
+- Hooks into FAL API: ``ResourceFactory::addFile()`` and ``ResourceFactory::replaceFile()``
+- Hooks into FAL API: ``ResourceStorage::setFileContents()``
+- Hooks into DataHandler: Handling files for group/select function
+- Hooks into ``GeneralUtility::upload_copy_move()``
+- Hooks into ``GeneralUtility::upload_to_tempfile()``
+- Provide an upgrade wizard for existing SVG files (please read the warnings in the upgrade wizard carefully)
+
+## WARNING
+
+This extension can sanitize the files only if the upload happens by the defined ways above.
+For example, if a third party extension allows an upload and not make use of the core APIs described above, the sanitizer can't sanitize these files.
+
+## Credits
+
+Thanks to Daryll Doyle and his [svg-sanitizer library](https://github.com/darylldoyle/svg-sanitizer)
+
+## Bundling PHAR of external library
+
+The process of bundling a composer package into a dedicated PHAR archive has been taken
+from blog post ["How to use PHP libraries in legacy extensions"](http://insight.helhum.io/post/148112375750/how-to-use-php-libraries-in-legacy-extensions).
+
+First install bundler package `clue/phar-composer` globally
+
+```
+composer global require clue/phar-composer
+```
+
+Then inside the extension folder create the PHAR archive
+(in case global composer binaries are not part of the PATH environment, it's
+possible to invoke `~/.composer/vendor/bin/phar-composer)` directly)
+
+```
+cd typo3conf/ext/svg_sanitizer
+phar-composer build enshrined/svg-sanitize Libraries/enshrined-svg-sanitize.phar
+```
+
+## Issue Reporting
+
+Please report any issues with the extension at [Github](https://github.com/TYPO3GmbH/svg_sanitizer/issues).
\ No newline at end of file
diff --git a/Tests/Fixtures/CleanSVG/TYPO3_Logo_Clean.svg b/Tests/Fixtures/CleanSVG/TYPO3_Logo_Clean.svg
new file mode 100644
index 0000000..01db9ad
--- /dev/null
+++ b/Tests/Fixtures/CleanSVG/TYPO3_Logo_Clean.svg
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg" id="Ebene_1" x="0px" y="0px" width="400px" height="168px" viewBox="0 0 400 168">
+  <rect x="0.404" y="0.412" fill="none" width="400" height="168"></rect>
+  <path d="M164.458,70.495v55.187h-7.691V70.495h-13.622v-6.72h34.934v6.72H164.458z M205.737,96.935v28.747h-7.966V96.935&#10;&#9;l-15.825-33.16h8.485l11.668,25.02l11.676-25.02h8.053L205.737,96.935z M245.705,102.332h-7.429v23.35h-7.698V63.775&#10;&#9;c0,0,7.613-0.625,14.956-0.625c13.438,0,17.331,8.316,17.331,19.195C262.865,95.785,258.261,102.332,245.705,102.332&#10;&#9; M246.585,69.522c-4.859,0-8.31,0.531-8.31,0.531v25.815h8.31c4.956,0,8.409-3.268,8.409-12.907&#10;&#9;C254.995,74.114,252.863,69.522,246.585,69.522 M290.635,126.295c-14.588,0-18.481-10.61-18.481-32.271&#10;&#9;c0-20.789,3.894-30.873,18.481-30.873c14.587,0,18.478,10.084,18.478,30.873C309.113,115.685,305.222,126.295,290.635,126.295&#10;&#9; M290.635,69.605c-7.953,0-10.611,5.4-10.611,24.858c0,19.006,2.658,25.383,10.611,25.383s10.61-6.377,10.61-25.383&#10;&#9;C301.246,75.005,298.588,69.605,290.635,69.605 M331.313,126.295c-4.331,0-10.78-1.321-11.587-1.51v-6.444&#10;&#9;c2.129,0.438,7.608,1.349,11.503,1.349c4.501,0,7.428-3.822,7.428-10.64c0-8.039-1.318-12.286-7.601-12.286H323.8v-6.463h6.362&#10;&#9;c7.176,0,7.515-7.34,7.515-10.873c0-6.99-2.202-9.823-6.621-9.823c-3.89,0-8.323,0.973-10.879,1.506v-6.454&#10;&#9;c0.967-0.179,6.193-1.506,10.696-1.506c9.105,0,14.332,3.892,14.332,17.075c0,6.015-2.132,11.311-6.819,13.002&#10;&#9;c5.397,0.354,7.869,6.277,7.869,14.942C346.255,121.351,341.129,126.295,331.313,126.295"></path>
+  <path fill="#FF8700" d="M106.074,100.128c-1.247,0.368-2.242,0.506-3.547,0.506c-10.691,0-26.389-37.359-26.389-49.793&#10;&#9;c0-4.577,1.083-6.104,2.613-7.415c-13.084,1.527-28.784,6.329-33.804,12.433c-1.085,1.529-1.745,3.926-1.745,6.98&#10;&#9;c0,19.41,20.718,63.455,35.332,63.455C85.297,126.295,96.696,115.181,106.074,100.128"></path>
+  <path fill="#FF8700" d="M99.25,42.122c13.52,0,27.049,2.18,27.049,9.812c0,15.483-9.819,34.246-14.832,34.246&#10;&#9;c-8.942,0-20.065-24.867-20.065-37.301C91.403,43.209,93.583,42.122,99.25,42.122"></path>
+</svg>
diff --git a/Tests/Fixtures/CleanSVG/TYPO3_Logo_Data.svg b/Tests/Fixtures/CleanSVG/TYPO3_Logo_Data.svg
new file mode 100644
index 0000000..4e44498
--- /dev/null
+++ b/Tests/Fixtures/CleanSVG/TYPO3_Logo_Data.svg
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg" id="Ebene_1" x="0px" y="0px" width="400px" height="168px" viewBox="0 0 400 168">
+  <image></image>
+  <rect x="0.404" y="0.412" fill="none" width="400" height="168"></rect>
+  <path d="M164.458,70.495v55.187h-7.691V70.495h-13.622v-6.72h34.934v6.72H164.458z M205.737,96.935v28.747h-7.966V96.935&#10;&#9;l-15.825-33.16h8.485l11.668,25.02l11.676-25.02h8.053L205.737,96.935z M245.705,102.332h-7.429v23.35h-7.698V63.775&#10;&#9;c0,0,7.613-0.625,14.956-0.625c13.438,0,17.331,8.316,17.331,19.195C262.865,95.785,258.261,102.332,245.705,102.332&#10;&#9; M246.585,69.522c-4.859,0-8.31,0.531-8.31,0.531v25.815h8.31c4.956,0,8.409-3.268,8.409-12.907&#10;&#9;C254.995,74.114,252.863,69.522,246.585,69.522 M290.635,126.295c-14.588,0-18.481-10.61-18.481-32.271&#10;&#9;c0-20.789,3.894-30.873,18.481-30.873c14.587,0,18.478,10.084,18.478,30.873C309.113,115.685,305.222,126.295,290.635,126.295&#10;&#9; M290.635,69.605c-7.953,0-10.611,5.4-10.611,24.858c0,19.006,2.658,25.383,10.611,25.383s10.61-6.377,10.61-25.383&#10;&#9;C301.246,75.005,298.588,69.605,290.635,69.605 M331.313,126.295c-4.331,0-10.78-1.321-11.587-1.51v-6.444&#10;&#9;c2.129,0.438,7.608,1.349,11.503,1.349c4.501,0,7.428-3.822,7.428-10.64c0-8.039-1.318-12.286-7.601-12.286H323.8v-6.463h6.362&#10;&#9;c7.176,0,7.515-7.34,7.515-10.873c0-6.99-2.202-9.823-6.621-9.823c-3.89,0-8.323,0.973-10.879,1.506v-6.454&#10;&#9;c0.967-0.179,6.193-1.506,10.696-1.506c9.105,0,14.332,3.892,14.332,17.075c0,6.015-2.132,11.311-6.819,13.002&#10;&#9;c5.397,0.354,7.869,6.277,7.869,14.942C346.255,121.351,341.129,126.295,331.313,126.295"></path>
+  <path fill="#FF8700" d="M106.074,100.128c-1.247,0.368-2.242,0.506-3.547,0.506c-10.691,0-26.389-37.359-26.389-49.793&#10;&#9;c0-4.577,1.083-6.104,2.613-7.415c-13.084,1.527-28.784,6.329-33.804,12.433c-1.085,1.529-1.745,3.926-1.745,6.98&#10;&#9;c0,19.41,20.718,63.455,35.332,63.455C85.297,126.295,96.696,115.181,106.074,100.128"></path>
+  <path fill="#FF8700" d="M99.25,42.122c13.52,0,27.049,2.18,27.049,9.812c0,15.483-9.819,34.246-14.832,34.246&#10;&#9;c-8.942,0-20.065-24.867-20.065-37.301C91.403,43.209,93.583,42.122,99.25,42.122"></path>
+</svg>
diff --git a/Tests/Fixtures/CleanSVG/TYPO3_Logo_Script.svg b/Tests/Fixtures/CleanSVG/TYPO3_Logo_Script.svg
new file mode 100644
index 0000000..01db9ad
--- /dev/null
+++ b/Tests/Fixtures/CleanSVG/TYPO3_Logo_Script.svg
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg" id="Ebene_1" x="0px" y="0px" width="400px" height="168px" viewBox="0 0 400 168">
+  <rect x="0.404" y="0.412" fill="none" width="400" height="168"></rect>
+  <path d="M164.458,70.495v55.187h-7.691V70.495h-13.622v-6.72h34.934v6.72H164.458z M205.737,96.935v28.747h-7.966V96.935&#10;&#9;l-15.825-33.16h8.485l11.668,25.02l11.676-25.02h8.053L205.737,96.935z M245.705,102.332h-7.429v23.35h-7.698V63.775&#10;&#9;c0,0,7.613-0.625,14.956-0.625c13.438,0,17.331,8.316,17.331,19.195C262.865,95.785,258.261,102.332,245.705,102.332&#10;&#9; M246.585,69.522c-4.859,0-8.31,0.531-8.31,0.531v25.815h8.31c4.956,0,8.409-3.268,8.409-12.907&#10;&#9;C254.995,74.114,252.863,69.522,246.585,69.522 M290.635,126.295c-14.588,0-18.481-10.61-18.481-32.271&#10;&#9;c0-20.789,3.894-30.873,18.481-30.873c14.587,0,18.478,10.084,18.478,30.873C309.113,115.685,305.222,126.295,290.635,126.295&#10;&#9; M290.635,69.605c-7.953,0-10.611,5.4-10.611,24.858c0,19.006,2.658,25.383,10.611,25.383s10.61-6.377,10.61-25.383&#10;&#9;C301.246,75.005,298.588,69.605,290.635,69.605 M331.313,126.295c-4.331,0-10.78-1.321-11.587-1.51v-6.444&#10;&#9;c2.129,0.438,7.608,1.349,11.503,1.349c4.501,0,7.428-3.822,7.428-10.64c0-8.039-1.318-12.286-7.601-12.286H323.8v-6.463h6.362&#10;&#9;c7.176,0,7.515-7.34,7.515-10.873c0-6.99-2.202-9.823-6.621-9.823c-3.89,0-8.323,0.973-10.879,1.506v-6.454&#10;&#9;c0.967-0.179,6.193-1.506,10.696-1.506c9.105,0,14.332,3.892,14.332,17.075c0,6.015-2.132,11.311-6.819,13.002&#10;&#9;c5.397,0.354,7.869,6.277,7.869,14.942C346.255,121.351,341.129,126.295,331.313,126.295"></path>
+  <path fill="#FF8700" d="M106.074,100.128c-1.247,0.368-2.242,0.506-3.547,0.506c-10.691,0-26.389-37.359-26.389-49.793&#10;&#9;c0-4.577,1.083-6.104,2.613-7.415c-13.084,1.527-28.784,6.329-33.804,12.433c-1.085,1.529-1.745,3.926-1.745,6.98&#10;&#9;c0,19.41,20.718,63.455,35.332,63.455C85.297,126.295,96.696,115.181,106.074,100.128"></path>
+  <path fill="#FF8700" d="M99.25,42.122c13.52,0,27.049,2.18,27.049,9.812c0,15.483-9.819,34.246-14.832,34.246&#10;&#9;c-8.942,0-20.065-24.867-20.065-37.301C91.403,43.209,93.583,42.122,99.25,42.122"></path>
+</svg>
diff --git a/Tests/Fixtures/CleanSVG/billion_laughs.svg b/Tests/Fixtures/CleanSVG/billion_laughs.svg
new file mode 100644
index 0000000..e69de29
diff --git a/Tests/Fixtures/CleanSVG/entity.svg b/Tests/Fixtures/CleanSVG/entity.svg
new file mode 100644
index 0000000..a7c49b4
--- /dev/null
+++ b/Tests/Fixtures/CleanSVG/entity.svg
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg xmlns="http://www.w3.org/2000/svg">
+  <text x="0" y="20" font-size="20">&lab;</text>
+</svg>
diff --git a/Tests/Fixtures/CleanSVG/entity_2.svg b/Tests/Fixtures/CleanSVG/entity_2.svg
new file mode 100644
index 0000000..cf31461
--- /dev/null
+++ b/Tests/Fixtures/CleanSVG/entity_2.svg
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg xmlns="http://www.w3.org/2000/svg">
+  <text x="0" y="20" font-size="20">&lab2;</text>
+</svg>
diff --git a/Tests/Fixtures/CleanSVG/html.svg b/Tests/Fixtures/CleanSVG/html.svg
new file mode 100644
index 0000000..ae395b7
--- /dev/null
+++ b/Tests/Fixtures/CleanSVG/html.svg
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg xmlns="http://www.w3.org/2000/svg">
+  <rect x="10" y="10" width="100" height="100" stroke="red" stroke-width="10" fill="white"></rect>
+</svg>
diff --git a/Tests/Fixtures/CleanSVG/simple.svg b/Tests/Fixtures/CleanSVG/simple.svg
new file mode 100644
index 0000000..ae395b7
--- /dev/null
+++ b/Tests/Fixtures/CleanSVG/simple.svg
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg xmlns="http://www.w3.org/2000/svg">
+  <rect x="10" y="10" width="100" height="100" stroke="red" stroke-width="10" fill="white"></rect>
+</svg>
diff --git a/Tests/Fixtures/CleanSVG/xlink_laughs.svg b/Tests/Fixtures/CleanSVG/xlink_laughs.svg
new file mode 100644
index 0000000..dc37126
--- /dev/null
+++ b/Tests/Fixtures/CleanSVG/xlink_laughs.svg
@@ -0,0 +1,146 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 512 512" xml:space="preserve" x="0px" y="0px" width="512" height="512">
+ <defs>
+    <g id="a0">
+      <circle stroke="#000000" fill="#ffffff" fill-opacity="0.1" r="10"></circle>
+    </g>
+  </defs><defs>
+<g id="a1">
+<use x="0" y="10" xlink:href="#a0"></use>
+<use x="10" y="10" xlink:href="#a0"></use>
+<use x="20" y="10" xlink:href="#a0"></use>
+<use x="30" y="10" xlink:href="#a0"></use>
+<use x="40" y="10" xlink:href="#a0"></use>
+<use x="50" y="10" xlink:href="#a0"></use>
+<use x="60" y="10" xlink:href="#a0"></use>
+<use x="70" y="10" xlink:href="#a0"></use>
+<use x="80" y="10" xlink:href="#a0"></use>
+<use x="90" y="10" xlink:href="#a0"></use>
+</g>
+</defs>
+<defs>
+<g id="a2">
+<use x="0" y="10" xlink:href="#a1"></use>
+<use x="10" y="10" xlink:href="#a1"></use>
+<use x="20" y="10" xlink:href="#a1"></use>
+<use x="30" y="10" xlink:href="#a1"></use>
+<use x="40" y="10" xlink:href="#a1"></use>
+<use x="50" y="10" xlink:href="#a1"></use>
+<use x="60" y="10" xlink:href="#a1"></use>
+<use x="70" y="10" xlink:href="#a1"></use>
+<use x="80" y="10" xlink:href="#a1"></use>
+<use x="90" y="10" xlink:href="#a1"></use>
+</g>
+</defs>
+<defs>
+<g id="a3">
+<use x="0" y="10" xlink:href="#a2"></use>
+<use x="10" y="10" xlink:href="#a2"></use>
+<use x="20" y="10" xlink:href="#a2"></use>
+<use x="30" y="10" xlink:href="#a2"></use>
+<use x="40" y="10" xlink:href="#a2"></use>
+<use x="50" y="10" xlink:href="#a2"></use>
+<use x="60" y="10" xlink:href="#a2"></use>
+<use x="70" y="10" xlink:href="#a2"></use>
+<use x="80" y="10" xlink:href="#a2"></use>
+<use x="90" y="10" xlink:href="#a2"></use>
+</g>
+</defs>
+<defs>
+<g id="a4">
+<use x="0" y="10" xlink:href="#a3"></use>
+<use x="10" y="10" xlink:href="#a3"></use>
+<use x="20" y="10" xlink:href="#a3"></use>
+<use x="30" y="10" xlink:href="#a3"></use>
+<use x="40" y="10" xlink:href="#a3"></use>
+<use x="50" y="10" xlink:href="#a3"></use>
+<use x="60" y="10" xlink:href="#a3"></use>
+<use x="70" y="10" xlink:href="#a3"></use>
+<use x="80" y="10" xlink:href="#a3"></use>
+<use x="90" y="10" xlink:href="#a3"></use>
+</g>
+</defs>
+<defs>
+<g id="a5">
+<use x="0" y="10" xlink:href="#a4"></use>
+<use x="10" y="10" xlink:href="#a4"></use>
+<use x="20" y="10" xlink:href="#a4"></use>
+<use x="30" y="10" xlink:href="#a4"></use>
+<use x="40" y="10" xlink:href="#a4"></use>
+<use x="50" y="10" xlink:href="#a4"></use>
+<use x="60" y="10" xlink:href="#a4"></use>
+<use x="70" y="10" xlink:href="#a4"></use>
+<use x="80" y="10" xlink:href="#a4"></use>
+<use x="90" y="10" xlink:href="#a4"></use>
+</g>
+</defs>
+<defs>
+<g id="a6">
+<use x="0" y="10" xlink:href="#a5"></use>
+<use x="10" y="10" xlink:href="#a5"></use>
+<use x="20" y="10" xlink:href="#a5"></use>
+<use x="30" y="10" xlink:href="#a5"></use>
+<use x="40" y="10" xlink:href="#a5"></use>
+<use x="50" y="10" xlink:href="#a5"></use>
+<use x="60" y="10" xlink:href="#a5"></use>
+<use x="70" y="10" xlink:href="#a5"></use>
+<use x="80" y="10" xlink:href="#a5"></use>
+<use x="90" y="10" xlink:href="#a5"></use>
+</g>
+</defs>
+<defs>
+<g id="a7">
+<use x="0" y="10" xlink:href="#a6"></use>
+<use x="10" y="10" xlink:href="#a6"></use>
+<use x="20" y="10" xlink:href="#a6"></use>
+<use x="30" y="10" xlink:href="#a6"></use>
+<use x="40" y="10" xlink:href="#a6"></use>
+<use x="50" y="10" xlink:href="#a6"></use>
+<use x="60" y="10" xlink:href="#a6"></use>
+<use x="70" y="10" xlink:href="#a6"></use>
+<use x="80" y="10" xlink:href="#a6"></use>
+<use x="90" y="10" xlink:href="#a6"></use>
+</g>
+</defs>
+<defs>
+<g id="a8">
+<use x="0" y="10" xlink:href="#a7"></use>
+<use x="10" y="10" xlink:href="#a7"></use>
+<use x="20" y="10" xlink:href="#a7"></use>
+<use x="30" y="10" xlink:href="#a7"></use>
+<use x="40" y="10" xlink:href="#a7"></use>
+<use x="50" y="10" xlink:href="#a7"></use>
+<use x="60" y="10" xlink:href="#a7"></use>
+<use x="70" y="10" xlink:href="#a7"></use>
+<use x="80" y="10" xlink:href="#a7"></use>
+<use x="90" y="10" xlink:href="#a7"></use>
+</g>
+</defs>
+<defs>
+<g id="a9">
+<use x="0" y="10" xlink:href="#a8"></use>
+<use x="10" y="10" xlink:href="#a8"></use>
+<use x="20" y="10" xlink:href="#a8"></use>
+<use x="30" y="10" xlink:href="#a8"></use>
+<use x="40" y="10" xlink:href="#a8"></use>
+<use x="50" y="10" xlink:href="#a8"></use>
+<use x="60" y="10" xlink:href="#a8"></use>
+<use x="70" y="10" xlink:href="#a8"></use>
+<use x="80" y="10" xlink:href="#a8"></use>
+<use x="90" y="10" xlink:href="#a8"></use>
+</g>
+</defs>
+<defs>
+<g id="a10">
+<use x="0" y="10" xlink:href="#a9"></use>
+<use x="10" y="10" xlink:href="#a9"></use>
+<use x="20" y="10" xlink:href="#a9"></use>
+<use x="30" y="10" xlink:href="#a9"></use>
+<use x="40" y="10" xlink:href="#a9"></use>
+<use x="50" y="10" xlink:href="#a9"></use>
+<use x="60" y="10" xlink:href="#a9"></use>
+<use x="70" y="10" xlink:href="#a9"></use>
+<use x="80" y="10" xlink:href="#a9"></use>
+<use x="90" y="10" xlink:href="#a9"></use>
+</g>
+</defs><use x="0" y="0" xlink:href="#a9"></use></svg>
diff --git a/Tests/Fixtures/CleanSVG/xss.svg b/Tests/Fixtures/CleanSVG/xss.svg
new file mode 100644
index 0000000..9e0f3c8
--- /dev/null
+++ b/Tests/Fixtures/CleanSVG/xss.svg
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg xmlns="http://www.w3.org/2000/svg">
+  <rect x="100" y="100" width="100" height="100" stroke="red" stroke-width="10" fill="white"></rect>
+</svg>
diff --git a/Tests/Fixtures/DirtySVG/TYPO3_Logo_Clean.svg b/Tests/Fixtures/DirtySVG/TYPO3_Logo_Clean.svg
new file mode 100644
index 0000000..01db9ad
--- /dev/null
+++ b/Tests/Fixtures/DirtySVG/TYPO3_Logo_Clean.svg
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg" id="Ebene_1" x="0px" y="0px" width="400px" height="168px" viewBox="0 0 400 168">
+  <rect x="0.404" y="0.412" fill="none" width="400" height="168"></rect>
+  <path d="M164.458,70.495v55.187h-7.691V70.495h-13.622v-6.72h34.934v6.72H164.458z M205.737,96.935v28.747h-7.966V96.935&#10;&#9;l-15.825-33.16h8.485l11.668,25.02l11.676-25.02h8.053L205.737,96.935z M245.705,102.332h-7.429v23.35h-7.698V63.775&#10;&#9;c0,0,7.613-0.625,14.956-0.625c13.438,0,17.331,8.316,17.331,19.195C262.865,95.785,258.261,102.332,245.705,102.332&#10;&#9; M246.585,69.522c-4.859,0-8.31,0.531-8.31,0.531v25.815h8.31c4.956,0,8.409-3.268,8.409-12.907&#10;&#9;C254.995,74.114,252.863,69.522,246.585,69.522 M290.635,126.295c-14.588,0-18.481-10.61-18.481-32.271&#10;&#9;c0-20.789,3.894-30.873,18.481-30.873c14.587,0,18.478,10.084,18.478,30.873C309.113,115.685,305.222,126.295,290.635,126.295&#10;&#9; M290.635,69.605c-7.953,0-10.611,5.4-10.611,24.858c0,19.006,2.658,25.383,10.611,25.383s10.61-6.377,10.61-25.383&#10;&#9;C301.246,75.005,298.588,69.605,290.635,69.605 M331.313,126.295c-4.331,0-10.78-1.321-11.587-1.51v-6.444&#10;&#9;c2.129,0.438,7.608,1.349,11.503,1.349c4.501,0,7.428-3.822,7.428-10.64c0-8.039-1.318-12.286-7.601-12.286H323.8v-6.463h6.362&#10;&#9;c7.176,0,7.515-7.34,7.515-10.873c0-6.99-2.202-9.823-6.621-9.823c-3.89,0-8.323,0.973-10.879,1.506v-6.454&#10;&#9;c0.967-0.179,6.193-1.506,10.696-1.506c9.105,0,14.332,3.892,14.332,17.075c0,6.015-2.132,11.311-6.819,13.002&#10;&#9;c5.397,0.354,7.869,6.277,7.869,14.942C346.255,121.351,341.129,126.295,331.313,126.295"></path>
+  <path fill="#FF8700" d="M106.074,100.128c-1.247,0.368-2.242,0.506-3.547,0.506c-10.691,0-26.389-37.359-26.389-49.793&#10;&#9;c0-4.577,1.083-6.104,2.613-7.415c-13.084,1.527-28.784,6.329-33.804,12.433c-1.085,1.529-1.745,3.926-1.745,6.98&#10;&#9;c0,19.41,20.718,63.455,35.332,63.455C85.297,126.295,96.696,115.181,106.074,100.128"></path>
+  <path fill="#FF8700" d="M99.25,42.122c13.52,0,27.049,2.18,27.049,9.812c0,15.483-9.819,34.246-14.832,34.246&#10;&#9;c-8.942,0-20.065-24.867-20.065-37.301C91.403,43.209,93.583,42.122,99.25,42.122"></path>
+</svg>
diff --git a/Tests/Fixtures/DirtySVG/TYPO3_Logo_Data.svg b/Tests/Fixtures/DirtySVG/TYPO3_Logo_Data.svg
new file mode 100644
index 0000000..0a01474
--- /dev/null
+++ b/Tests/Fixtures/DirtySVG/TYPO3_Logo_Data.svg
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg" id="Ebene_1" x="0px" y="0px" width="400px" height="168px" viewBox="0 0 400 168">
+  <image data="foo" />
+  <rect x="0.404" y="0.412" fill="none" width="400" height="168"></rect>
+  <path d="M164.458,70.495v55.187h-7.691V70.495h-13.622v-6.72h34.934v6.72H164.458z M205.737,96.935v28.747h-7.966V96.935&#10;&#9;l-15.825-33.16h8.485l11.668,25.02l11.676-25.02h8.053L205.737,96.935z M245.705,102.332h-7.429v23.35h-7.698V63.775&#10;&#9;c0,0,7.613-0.625,14.956-0.625c13.438,0,17.331,8.316,17.331,19.195C262.865,95.785,258.261,102.332,245.705,102.332&#10;&#9; M246.585,69.522c-4.859,0-8.31,0.531-8.31,0.531v25.815h8.31c4.956,0,8.409-3.268,8.409-12.907&#10;&#9;C254.995,74.114,252.863,69.522,246.585,69.522 M290.635,126.295c-14.588,0-18.481-10.61-18.481-32.271&#10;&#9;c0-20.789,3.894-30.873,18.481-30.873c14.587,0,18.478,10.084,18.478,30.873C309.113,115.685,305.222,126.295,290.635,126.295&#10;&#9; M290.635,69.605c-7.953,0-10.611,5.4-10.611,24.858c0,19.006,2.658,25.383,10.611,25.383s10.61-6.377,10.61-25.383&#10;&#9;C301.246,75.005,298.588,69.605,290.635,69.605 M331.313,126.295c-4.331,0-10.78-1.321-11.587-1.51v-6.444&#10;&#9;c2.129,0.438,7.608,1.349,11.503,1.349c4.501,0,7.428-3.822,7.428-10.64c0-8.039-1.318-12.286-7.601-12.286H323.8v-6.463h6.362&#10;&#9;c7.176,0,7.515-7.34,7.515-10.873c0-6.99-2.202-9.823-6.621-9.823c-3.89,0-8.323,0.973-10.879,1.506v-6.454&#10;&#9;c0.967-0.179,6.193-1.506,10.696-1.506c9.105,0,14.332,3.892,14.332,17.075c0,6.015-2.132,11.311-6.819,13.002&#10;&#9;c5.397,0.354,7.869,6.277,7.869,14.942C346.255,121.351,341.129,126.295,331.313,126.295"></path>
+  <path fill="#FF8700" d="M106.074,100.128c-1.247,0.368-2.242,0.506-3.547,0.506c-10.691,0-26.389-37.359-26.389-49.793&#10;&#9;c0-4.577,1.083-6.104,2.613-7.415c-13.084,1.527-28.784,6.329-33.804,12.433c-1.085,1.529-1.745,3.926-1.745,6.98&#10;&#9;c0,19.41,20.718,63.455,35.332,63.455C85.297,126.295,96.696,115.181,106.074,100.128"></path>
+  <path fill="#FF8700" d="M99.25,42.122c13.52,0,27.049,2.18,27.049,9.812c0,15.483-9.819,34.246-14.832,34.246&#10;&#9;c-8.942,0-20.065-24.867-20.065-37.301C91.403,43.209,93.583,42.122,99.25,42.122"></path>
+</svg>
diff --git a/Tests/Fixtures/DirtySVG/TYPO3_Logo_Script.svg b/Tests/Fixtures/DirtySVG/TYPO3_Logo_Script.svg
new file mode 100644
index 0000000..e1170d4
--- /dev/null
+++ b/Tests/Fixtures/DirtySVG/TYPO3_Logo_Script.svg
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg" id="Ebene_1" x="0px" y="0px" width="400px" height="168px" viewBox="0 0 400 168">
+  <script type="text/javascript">
+    // <![CDATA[
+    function doBadThings(evt) {
+    }
+   // ]]>
+  </script>
+  <rect x="0.404" y="0.412" fill="none" width="400" height="168"></rect>
+  <path d="M164.458,70.495v55.187h-7.691V70.495h-13.622v-6.72h34.934v6.72H164.458z M205.737,96.935v28.747h-7.966V96.935&#10;&#9;l-15.825-33.16h8.485l11.668,25.02l11.676-25.02h8.053L205.737,96.935z M245.705,102.332h-7.429v23.35h-7.698V63.775&#10;&#9;c0,0,7.613-0.625,14.956-0.625c13.438,0,17.331,8.316,17.331,19.195C262.865,95.785,258.261,102.332,245.705,102.332&#10;&#9; M246.585,69.522c-4.859,0-8.31,0.531-8.31,0.531v25.815h8.31c4.956,0,8.409-3.268,8.409-12.907&#10;&#9;C254.995,74.114,252.863,69.522,246.585,69.522 M290.635,126.295c-14.588,0-18.481-10.61-18.481-32.271&#10;&#9;c0-20.789,3.894-30.873,18.481-30.873c14.587,0,18.478,10.084,18.478,30.873C309.113,115.685,305.222,126.295,290.635,126.295&#10;&#9; M290.635,69.605c-7.953,0-10.611,5.4-10.611,24.858c0,19.006,2.658,25.383,10.611,25.383s10.61-6.377,10.61-25.383&#10;&#9;C301.246,75.005,298.588,69.605,290.635,69.605 M331.313,126.295c-4.331,0-10.78-1.321-11.587-1.51v-6.444&#10;&#9;c2.129,0.438,7.608,1.349,11.503,1.349c4.501,0,7.428-3.822,7.428-10.64c0-8.039-1.318-12.286-7.601-12.286H323.8v-6.463h6.362&#10;&#9;c7.176,0,7.515-7.34,7.515-10.873c0-6.99-2.202-9.823-6.621-9.823c-3.89,0-8.323,0.973-10.879,1.506v-6.454&#10;&#9;c0.967-0.179,6.193-1.506,10.696-1.506c9.105,0,14.332,3.892,14.332,17.075c0,6.015-2.132,11.311-6.819,13.002&#10;&#9;c5.397,0.354,7.869,6.277,7.869,14.942C346.255,121.351,341.129,126.295,331.313,126.295"></path>
+  <path fill="#FF8700" d="M106.074,100.128c-1.247,0.368-2.242,0.506-3.547,0.506c-10.691,0-26.389-37.359-26.389-49.793&#10;&#9;c0-4.577,1.083-6.104,2.613-7.415c-13.084,1.527-28.784,6.329-33.804,12.433c-1.085,1.529-1.745,3.926-1.745,6.98&#10;&#9;c0,19.41,20.718,63.455,35.332,63.455C85.297,126.295,96.696,115.181,106.074,100.128"></path>
+  <path fill="#FF8700" d="M99.25,42.122c13.52,0,27.049,2.18,27.049,9.812c0,15.483-9.819,34.246-14.832,34.246&#10;&#9;c-8.942,0-20.065-24.867-20.065-37.301C91.403,43.209,93.583,42.122,99.25,42.122"></path>
+</svg>
diff --git a/Tests/Fixtures/DirtySVG/billion_laughs.svg b/Tests/Fixtures/DirtySVG/billion_laughs.svg
new file mode 100644
index 0000000..dc94140
--- /dev/null
+++ b/Tests/Fixtures/DirtySVG/billion_laughs.svg
@@ -0,0 +1,16 @@
+<?xml version="1.0" standalone="no"?>
+<!DOCTYPE lolz [
+<!ENTITY lol "lol">
+<!ENTITY lol2 "&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;">
+<!ENTITY lol3 "&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;">
+<!ENTITY lol4 "&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;">
+<!ENTITY lol5 "&lol4;&lol4;&lol4;&lol4;&lol4;&lol4;&lol4;&lol4;&lol4;&lol4;">
+<!ENTITY lol6 "&lol5;&lol5;&lol5;&lol5;&lol5;&lol5;&lol5;&lol5;&lol5;&lol5;">
+<!ENTITY lol7 "&lol6;&lol6;&lol6;&lol6;&lol6;&lol6;&lol6;&lol6;&lol6;&lol6;">
+<!ENTITY lol8 "&lol7;&lol7;&lol7;&lol7;&lol7;&lol7;&lol7;&lol7;&lol7;&lol7;">
+<!ENTITY lol9 "&lol8;&lol8;&lol8;&lol8;&lol8;&lol8;&lol8;&lol8;&lol8;&lol8;">
+<!ENTITY lol10 "&lol9;&lol9;&lol9;&lol9;&lol9;&lol9;&lol9;&lol9;&lol9;&lol9;">
+]>
+<svg xmlns="http://www.w3.org/2000/svg">
+	<text x="0" y="20" font-size="20">&lol10;</text>
+</svg>
\ No newline at end of file
diff --git a/Tests/Fixtures/DirtySVG/entity.svg b/Tests/Fixtures/DirtySVG/entity.svg
new file mode 100644
index 0000000..bc2d3de
--- /dev/null
+++ b/Tests/Fixtures/DirtySVG/entity.svg
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE fortiguard [ <!ENTITY lab "cool, text as an image">]>
+<svg xmlns="http://www.w3.org/2000/svg">
+	<text x="0" y="20" font-size="20">&lab;</text>
+</svg>
\ No newline at end of file
diff --git a/Tests/Fixtures/DirtySVG/entity_2.svg b/Tests/Fixtures/DirtySVG/entity_2.svg
new file mode 100644
index 0000000..19d3a5b
--- /dev/null
+++ b/Tests/Fixtures/DirtySVG/entity_2.svg
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE fortiguard [ 
+<!ENTITY lab "cool, text as an image">
+<!ENTITY lab2 "&lab;&lab;">
+]>
+<svg xmlns="http://www.w3.org/2000/svg">
+	<text x="0" y="20" font-size="20">&lab2;</text>
+</svg>
\ No newline at end of file
diff --git a/Tests/Fixtures/DirtySVG/html.svg b/Tests/Fixtures/DirtySVG/html.svg
new file mode 100644
index 0000000..31bd359
--- /dev/null
+++ b/Tests/Fixtures/DirtySVG/html.svg
@@ -0,0 +1,14 @@
+<?xml version="1.0" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg" >
+	  <rect x="10" y="10" width="100" height="100" stroke="red" stroke-width="10" fill="white" />
+	  <foreignObject class="node" x="46" y="22" width="200" height="300">
+	  		<body xmlns="http://www.w3.org/1999/xhtml">
+	  			<style>
+	  				h1 {color: blue}
+	  			</style>
+	  			<h1>HTML Injection for phishing</h1>
+	  		</body>
+	  </foreignObject>
+</svg>
+
diff --git a/Tests/Fixtures/DirtySVG/simple.svg b/Tests/Fixtures/DirtySVG/simple.svg
new file mode 100644
index 0000000..29fc853
--- /dev/null
+++ b/Tests/Fixtures/DirtySVG/simple.svg
@@ -0,0 +1,5 @@
+<?xml version="1.0" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg">
+	  <rect x="10" y="10" width="100" height="100" stroke="red" stroke-width="10" fill="white" />
+</svg>
\ No newline at end of file
diff --git a/Tests/Fixtures/DirtySVG/xlink_laughs.svg b/Tests/Fixtures/DirtySVG/xlink_laughs.svg
new file mode 100644
index 0000000..01c676a
--- /dev/null
+++ b/Tests/Fixtures/DirtySVG/xlink_laughs.svg
@@ -0,0 +1,146 @@
+<?xml version="1.0" standalone="no"?>
+<svg viewBox="0 0 512 512" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" x="0px" y="0px" width="512" height="512">
+ <defs>
+    <g id="a0">
+      <circle stroke="#000000" fill="#ffffff" fill-opacity="0.1" r="10"/>
+    </g>
+  </defs><defs>
+<g id="a1">
+<use x="0" y="10" xlink:href="#a0" />
+<use x="10" y="10" xlink:href="#a0" />
+<use x="20" y="10" xlink:href="#a0" />
+<use x="30" y="10" xlink:href="#a0" />
+<use x="40" y="10" xlink:href="#a0" />
+<use x="50" y="10" xlink:href="#a0" />
+<use x="60" y="10" xlink:href="#a0" />
+<use x="70" y="10" xlink:href="#a0" />
+<use x="80" y="10" xlink:href="#a0" />
+<use x="90" y="10" xlink:href="#a0" />
+</g>
+</defs>
+<defs>
+<g id="a2">
+<use x="0" y="10" xlink:href="#a1" />
+<use x="10" y="10" xlink:href="#a1" />
+<use x="20" y="10" xlink:href="#a1" />
+<use x="30" y="10" xlink:href="#a1" />
+<use x="40" y="10" xlink:href="#a1" />
+<use x="50" y="10" xlink:href="#a1" />
+<use x="60" y="10" xlink:href="#a1" />
+<use x="70" y="10" xlink:href="#a1" />
+<use x="80" y="10" xlink:href="#a1" />
+<use x="90" y="10" xlink:href="#a1" />
+</g>
+</defs>
+<defs>
+<g id="a3">
+<use x="0" y="10" xlink:href="#a2" />
+<use x="10" y="10" xlink:href="#a2" />
+<use x="20" y="10" xlink:href="#a2" />
+<use x="30" y="10" xlink:href="#a2" />
+<use x="40" y="10" xlink:href="#a2" />
+<use x="50" y="10" xlink:href="#a2" />
+<use x="60" y="10" xlink:href="#a2" />
+<use x="70" y="10" xlink:href="#a2" />
+<use x="80" y="10" xlink:href="#a2" />
+<use x="90" y="10" xlink:href="#a2" />
+</g>
+</defs>
+<defs>
+<g id="a4">
+<use x="0" y="10" xlink:href="#a3" />
+<use x="10" y="10" xlink:href="#a3" />
+<use x="20" y="10" xlink:href="#a3" />
+<use x="30" y="10" xlink:href="#a3" />
+<use x="40" y="10" xlink:href="#a3" />
+<use x="50" y="10" xlink:href="#a3" />
+<use x="60" y="10" xlink:href="#a3" />
+<use x="70" y="10" xlink:href="#a3" />
+<use x="80" y="10" xlink:href="#a3" />
+<use x="90" y="10" xlink:href="#a3" />
+</g>
+</defs>
+<defs>
+<g id="a5">
+<use x="0" y="10" xlink:href="#a4" />
+<use x="10" y="10" xlink:href="#a4" />
+<use x="20" y="10" xlink:href="#a4" />
+<use x="30" y="10" xlink:href="#a4" />
+<use x="40" y="10" xlink:href="#a4" />
+<use x="50" y="10" xlink:href="#a4" />
+<use x="60" y="10" xlink:href="#a4" />
+<use x="70" y="10" xlink:href="#a4" />
+<use x="80" y="10" xlink:href="#a4" />
+<use x="90" y="10" xlink:href="#a4" />
+</g>
+</defs>
+<defs>
+<g id="a6">
+<use x="0" y="10" xlink:href="#a5" />
+<use x="10" y="10" xlink:href="#a5" />
+<use x="20" y="10" xlink:href="#a5" />
+<use x="30" y="10" xlink:href="#a5" />
+<use x="40" y="10" xlink:href="#a5" />
+<use x="50" y="10" xlink:href="#a5" />
+<use x="60" y="10" xlink:href="#a5" />
+<use x="70" y="10" xlink:href="#a5" />
+<use x="80" y="10" xlink:href="#a5" />
+<use x="90" y="10" xlink:href="#a5" />
+</g>
+</defs>
+<defs>
+<g id="a7">
+<use x="0" y="10" xlink:href="#a6" />
+<use x="10" y="10" xlink:href="#a6" />
+<use x="20" y="10" xlink:href="#a6" />
+<use x="30" y="10" xlink:href="#a6" />
+<use x="40" y="10" xlink:href="#a6" />
+<use x="50" y="10" xlink:href="#a6" />
+<use x="60" y="10" xlink:href="#a6" />
+<use x="70" y="10" xlink:href="#a6" />
+<use x="80" y="10" xlink:href="#a6" />
+<use x="90" y="10" xlink:href="#a6" />
+</g>
+</defs>
+<defs>
+<g id="a8">
+<use x="0" y="10" xlink:href="#a7" />
+<use x="10" y="10" xlink:href="#a7" />
+<use x="20" y="10" xlink:href="#a7" />
+<use x="30" y="10" xlink:href="#a7" />
+<use x="40" y="10" xlink:href="#a7" />
+<use x="50" y="10" xlink:href="#a7" />
+<use x="60" y="10" xlink:href="#a7" />
+<use x="70" y="10" xlink:href="#a7" />
+<use x="80" y="10" xlink:href="#a7" />
+<use x="90" y="10" xlink:href="#a7" />
+</g>
+</defs>
+<defs>
+<g id="a9">
+<use x="0" y="10" xlink:href="#a8" />
+<use x="10" y="10" xlink:href="#a8" />
+<use x="20" y="10" xlink:href="#a8" />
+<use x="30" y="10" xlink:href="#a8" />
+<use x="40" y="10" xlink:href="#a8" />
+<use x="50" y="10" xlink:href="#a8" />
+<use x="60" y="10" xlink:href="#a8" />
+<use x="70" y="10" xlink:href="#a8" />
+<use x="80" y="10" xlink:href="#a8" />
+<use x="90" y="10" xlink:href="#a8" />
+</g>
+</defs>
+<defs>
+<g id="a10">
+<use x="0" y="10" xlink:href="#a9" />
+<use x="10" y="10" xlink:href="#a9" />
+<use x="20" y="10" xlink:href="#a9" />
+<use x="30" y="10" xlink:href="#a9" />
+<use x="40" y="10" xlink:href="#a9" />
+<use x="50" y="10" xlink:href="#a9" />
+<use x="60" y="10" xlink:href="#a9" />
+<use x="70" y="10" xlink:href="#a9" />
+<use x="80" y="10" xlink:href="#a9" />
+<use x="90" y="10" xlink:href="#a9" />
+</g>
+</defs><use x="0" y="0" xlink:href="#a9" /></svg>
\ No newline at end of file
diff --git a/Tests/Fixtures/DirtySVG/xss.svg b/Tests/Fixtures/DirtySVG/xss.svg
new file mode 100644
index 0000000..f6aa93d
--- /dev/null
+++ b/Tests/Fixtures/DirtySVG/xss.svg
@@ -0,0 +1,8 @@
+<?xml version="1.0" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg">
+	  <rect x="100" y="100" width="100" height="100" stroke="red" stroke-width="10" fill="white" />
+	  <script type="text/javascript">
+	  	alert('XSS');
+	  </script>
+</svg>
\ No newline at end of file
diff --git a/Tests/Unit/Service/SvgSanitizerServiceTest.php b/Tests/Unit/Service/SvgSanitizerServiceTest.php
new file mode 100644
index 0000000..000b441
--- /dev/null
+++ b/Tests/Unit/Service/SvgSanitizerServiceTest.php
@@ -0,0 +1,77 @@
+<?php
+
+namespace T3G\SvgSanitizer\Tests\Unit\Service;
+
+/*
+ * This file is part of the TYPO3 extension svg_sanitizer.
+ *
+ * It is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License, either version 2
+ * of the License, or any later version.
+ *
+ * For the full copyright and license information, please read the
+ * LICENSE.txt file that was distributed with this source code.
+ *
+ * The TYPO3 project - inspiring people to share!
+ */
+
+use enshrined\svgSanitize\Sanitizer;
+use Symfony\Component\Finder\Finder;
+use T3G\SvgSanitizer\Service\SvgSanitizerService;
+use TYPO3\TestingFramework\Core\BaseTestCase;
+
+/**
+ * Class SvgSanitizerService
+ */
+class SvgSanitizerServiceTest extends BaseTestCase
+{
+    /**
+     * Constructs a test case with the given name.
+     *
+     * @param string $name
+     * @param array  $data
+     * @param string $dataName
+     */
+    public function __construct($name = null, array $data = [], $dataName = '')
+    {
+        if (!class_exists(Sanitizer::class)) {
+            $extensionBasePath = dirname(__DIR__ . '/../../../../');
+            @include 'phar://' . $extensionBasePath . '/Libraries/enshrined-svg-sanitize.phar/vendor/autoload.php';
+        }
+        parent::__construct($name, $data, $dataName);
+    }
+
+    /**
+     * @return array
+     */
+    public function svgImagesDataProvider()
+    {
+        $basePath = dirname(__DIR__ . '/../../../') . '/Fixtures/';
+        $finder = new Finder();
+        $finder
+            ->files()
+            ->in($basePath . 'DirtySVG/')
+            ->name('*.svg');
+        $data = [];
+        foreach ($finder as $file) {
+            $fileName = $file->getFilename();
+            $data[$fileName] = ['DirtySVG/' . $fileName, 'CleanSVG/' . $fileName];
+        }
+        return $data;
+    }
+
+    /**
+     * @param string $inputFile
+     * @param string $expectedOutputFile
+     * @dataProvider svgImagesDataProvider
+     */
+    public function testThatImagesCanBeCleaned($inputFile, $expectedOutputFile)
+    {
+        $basePath = dirname(__DIR__ . '/../../../') . '/Fixtures/';
+        $service = new SvgSanitizerService();
+        self::assertStringEqualsFile(
+            $basePath . $expectedOutputFile,
+            $service->sanitizeAndReturnSvgContent(file_get_contents($basePath . $inputFile))
+        );
+    }
+}
diff --git a/composer.json b/composer.json
new file mode 100644
index 0000000..44de461
--- /dev/null
+++ b/composer.json
@@ -0,0 +1,54 @@
+{
+    "name": "t3g/svg-sanitizer",
+    "description": "Sanitize SVG files on upload",
+    "type": "typo3-cms-extension",
+    "license": "GPL-2.0-or-later",
+    "authors": [
+        {
+            "name": "TYPO3 GmbH",
+            "role": "Developer",
+            "homepage": "https://typo3.com/"
+        },
+        {
+            "name": "Frank Nägler",
+            "role": "Developer",
+            "homepage": "https://naegler.hamburg/"
+        }
+    ],
+    "replace": {
+        "t3g/svg_sanitizer": "self.version"
+    },
+    "config": {
+        "sort-packages": true,
+        "discard-changes": true,
+        "vendor-dir": ".build/vendor",
+        "bin-dir": ".build/bin"
+    },
+    "extra": {
+        "typo3/cms": {
+            "extension-key": "svg_sanitizer",
+            "web-dir": ".build"
+        }
+    },
+    "autoload": {
+        "psr-4": {
+            "T3G\\SvgSanitizer\\": "Classes/"
+        }
+    },
+    "autoload-dev": {
+        "psr-4": {
+            "T3G\\SvgSanitizer\\Tests\\": "Tests/"
+        }
+    },
+    "require": {
+        "enshrined/svg-sanitize": "^0.13.2",
+        "typo3/cms-core": "^8.7.13 || ^9.2 || ^10.1",
+        "typo3/cms-extbase": "^8.7.13 || ^9.2 || ^10.1",
+        "typo3/cms-install": "^8.7.13 || ^9.2 || ^10.1"
+    },
+    "require-dev": {
+        "bk2k/extension-helper": "^1.0",
+        "phpunit/phpunit": "^6.2",
+        "roave/security-advisories": "dev-master"
+    }
+}
diff --git a/ext_emconf.php b/ext_emconf.php
new file mode 100644
index 0000000..cf66bc1
--- /dev/null
+++ b/ext_emconf.php
@@ -0,0 +1,28 @@
+<?php
+/************************************************************************
+ * Extension Manager/Repository config file for ext "svg_sanitizer".
+ ************************************************************************/
+$EM_CONF[$_EXTKEY] = [
+    'title' => 'SVG Sanitizer',
+    'description' => 'Sanitize SVG files on upload',
+    'category' => 'extension',
+    'constraints' => [
+        'depends' => [
+            'typo3' => '8.7.13-10.4.99'
+        ],
+        'conflicts' => [],
+    ],
+    'autoload' => [
+        'psr-4' => [
+            'T3G\\SvgSanitizer\\' => 'Classes',
+        ],
+    ],
+    'state' => 'stable',
+    'uploadfolder' => 0,
+    'createDirs' => '',
+    'clearCacheOnLoad' => 1,
+    'author' => 'Frank Nägler',
+    'author_email' => 'frank.naegler@typo3.com',
+    'author_company' => 'TYPO3 GmbH',
+    'version' => '1.0.0',
+];
diff --git a/ext_localconf.php b/ext_localconf.php
new file mode 100644
index 0000000..27439d1
--- /dev/null
+++ b/ext_localconf.php
@@ -0,0 +1,45 @@
+<?php
+
+if (!defined('TYPO3_MODE')) {
+    die('Access denied.');
+}
+
+call_user_func(function () {
+    $signalSlotDispatcher = \TYPO3\CMS\Core\Utility\GeneralUtility::makeInstance(\TYPO3\CMS\Extbase\SignalSlot\Dispatcher::class);
+    $signalSlotDispatcher
+        ->connect(
+            \TYPO3\CMS\Core\Resource\ResourceStorage::class,
+            \TYPO3\CMS\Core\Resource\ResourceStorageInterface::SIGNAL_PreFileAdd,
+            \T3G\SvgSanitizer\SignalSlot\ResourceStorage::class,
+            \TYPO3\CMS\Core\Resource\ResourceStorageInterface::SIGNAL_PreFileAdd
+        );
+    $signalSlotDispatcher
+        ->connect(
+            \TYPO3\CMS\Core\Resource\ResourceStorage::class,
+            \TYPO3\CMS\Core\Resource\ResourceStorageInterface::SIGNAL_PreFileReplace,
+            \T3G\SvgSanitizer\SignalSlot\ResourceStorage::class,
+            \TYPO3\CMS\Core\Resource\ResourceStorageInterface::SIGNAL_PreFileReplace
+        );
+    $signalSlotDispatcher
+        ->connect(
+            \TYPO3\CMS\Core\Resource\ResourceStorage::class,
+            \TYPO3\CMS\Core\Resource\ResourceStorageInterface::SIGNAL_PostFileSetContents,
+            \T3G\SvgSanitizer\SignalSlot\ResourceStorage::class,
+            \TYPO3\CMS\Core\Resource\ResourceStorageInterface::SIGNAL_PostFileSetContents
+        );
+
+    $GLOBALS['TYPO3_CONF_VARS']['SC_OPTIONS']['TYPO3\CMS\Core\Utility\GeneralUtility']['moveUploadedFile'][]
+        = \T3G\SvgSanitizer\Hooks\GeneralUtilityHook::class . '->processMoveUploadedFile';
+
+    $GLOBALS['TYPO3_CONF_VARS']['SC_OPTIONS']['ext/install']['update']['T3G\SvgSanitizer\Updates\SanitizeExistingSVG']
+        = \T3G\SvgSanitizer\Updates\v8\SanitizeExistingSVG::class;
+    if (\TYPO3\CMS\Core\Utility\VersionNumberUtility::convertVersionNumberToInteger(TYPO3_version) >= 9005000) {
+        $GLOBALS['TYPO3_CONF_VARS']['SC_OPTIONS']['ext/install']['update']['T3G\SvgSanitizer\Updates\SanitizeExistingSVG']
+            = \T3G\SvgSanitizer\Updates\v9\SanitizeExistingSVG::class;
+    }
+
+    // The following hooks have been removed with v10:
+    $GLOBALS['TYPO3_CONF_VARS']['SC_OPTIONS']['t3lib/class.t3lib_tcemain.php']['processUpload']['svg_sanitizer']
+        = \T3G\SvgSanitizer\Hooks\DataHandlerHook::class;
+
+});