more cleanup in embedSVG

now comments and line breaks between tags are removed

_test/tests/inc/common_embedSVG.test.php

@@ -0,0 +1,34 @@
+<?php
+
+class common_embedSVG_test extends DokuWikiTest {
+
+    /**
+     * embed should succeed with a cleaned up result
+     */
+    function test_success() {
+        $file = mediaFN('wiki:test.svg');
+        $clean =
+            '<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" '.
+            'width="64" height="64" viewBox="0 0 64 64"><path d="M64 20l-32-16-32 16 32 16 32-16zM32 '.
+            '9.311l21.379 10.689-21.379 10.689-21.379-10.689 21.379-10.689zM57.59 28.795l6.41 3.205-32 16-32-16 '.
+            '6.41-3.205 25.59 12.795zM57.59 40.795l6.41 3.205-32 16-32-16 6.41-3.205 25.59 12.795z" '.
+            'fill="#000000"></path></svg>';
+
+        ob_start();
+        $this->assertTrue(embedSVG($file));
+        $svg = ob_get_clean();
+        $this->assertEquals($clean, $svg);
+    }
+
+    /**
+     * embed should fail because of the file size limit
+     */
+    function test_fail() {
+        $file = mediaFN('wiki:test.svg');
+        ob_start();
+        $this->assertFalse(embedSVG($file, 100));
+        $svg = ob_get_clean();
+        $this->assertEquals('', $svg);
+    }
+
+}

inc/common.php

@@ -2031,8 +2031,10 @@ function embedSVG($file, $maxsize = 2048) {
     if(filesize($file) > $maxsize) return false;
     if(!is_readable($file)) return false;
     $content = file_get_contents($file);
-    $content = preg_replace('/<\?xml .*?\?>/i', '', $content);
-    $content = preg_replace('/<!DOCTYPE .*?>/i', '', $content);
+    $content = preg_replace('/<!--.*?(-->)/s','', $content); // comments
+    $content = preg_replace('/<\?xml .*?\?>/i', '', $content); // xml header
+    $content = preg_replace('/<!DOCTYPE .*?>/i', '', $content); // doc type
+    $content = preg_replace('/>\s+</s', '><', $content); // newlines between tags
     $content = trim($content);
     if(substr($content, 0, 5) !== '<svg ') return false;
     echo $content;