`. resize() writes keyed style // values directly and so bypassed the style() sanitizer. // GHSA-ffmg-hfvg-jhg9 (follow-up to GHSA-pmf8-g7c8-7v54). $width = is_numeric($width) ? (int) $width : 0; $height = is_numeric($height) ? (int) $height : 0; if ($width > 0) { $this->styleAttributes['width'] = $width . 'px'; } else { unset($this->styleAttributes['width']); } if ($height > 0) { $this->styleAttributes['height'] = $height . 'px'; } else { unset($this->styleAttributes['height']); } return $this; } }