tests/fixtures/security/svg-animate-inject.svg

<svg xmlns="http://www.w3.org/2000/svg">
  <a href="#">
    <animate attributeName="href" values="javascript:alert(1)" dur="0s" fill="freeze"/>
    <rect width="100" height="100"/>
  </a>
</svg>
fix(security): comprehensive security audit and hardening 2026-05-13 21:33:50 +08:00			`<svg xmlns="http://www.w3.org/2000/svg">`
			`<a href="#">`
			`<animate attributeName="href" values="javascript:alert(1)" dur="0s" fill="freeze"/>`
			`<rect width="100" height="100"/>`
			`</a>`
			`</svg>`