tests/fixtures/security/svg-entity-bypass.svg

<svg xmlns="http://www.w3.org/2000/svg">
  <a href="&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;alert(1)">
    <rect width="100" height="100"/>
  </a>
</svg>
fix(security): comprehensive security audit and hardening 2026-05-13 21:33:50 +08:00			`<svg xmlns="http://www.w3.org/2000/svg">`
			`<a href="javascript:alert(1)">`
			`<rect width="100" height="100"/>`
			`</a>`
			`</svg>`