Uploaded-setting-handler-svg

SVG that sets the "handler" attribute with remote/data/script is blocked. Found $1="$2" in the uploaded SVG file.