2.9

✔️ Dynamic data is no longer inserted into the source code of SVG icons (#16).

Previous versions shouldn't be vulnerable to SVG injection because external data was sanitized before insertion. But the current DOM approach is more robust and will scale better if I add more customization options in the future.