SVG that sets the "handler" attribute with remote/data/script is blocked. Found $1="$2" in the uploaded SVG file.
$1="$2"
