The end result is that, due to the misleading mime type for svg files, most developers who don't know this nuance will accidentally handle them in such a way that makes stored xss vulnerabilities possible.
32+ Svg File W3Schools
Object Mockups. The world's largest web developer site. Sorry, your browser does not support inline svg. The world's largest web developer site. Svg has several methods for drawing paths, boxes, circles, text, and graphic images. Svg defines the graphics in xml format. Every element and every attribute in svg files can be animated. Svg stands for scalable vector graphics. The examples below embed the svg code directly into the html code. Here is an example of a simple svg graphic: The world's largest web developer site. Svg integrates with other w3c standards such as the dom and xsl. Svg defines the graphics in xml format. Svg is a w3c recommendation. This is supported by firefox, internet explorer 9, google chrome, opera, and safari. The html <svg> element is a container for svg graphics.