Comment 25 for bug 170225

> @JazzyNicco, any comments?

a, b) the patch is very recent, and it would indeed be safer to use it extensively in the trunk before backporting it. That's something we can discuss later with the 0.48.2 release plan.
As for c), saving as Plain SVG removes the sodipodi:absref and thus addresses your security concern.