« Menu
The SVG is served in an image tag and with a Content Security Policy that prevents inline JavaScript, both of which should prevent JavaScript execution.
Lab created by Robin Wood - DigiNinja
