Scalable vector graphics (.svg) files are lightweight, XML-based images that render at any resolution. They’re usually harmless, but they can also contain active code, and hackers appear to be relying on them more often as a means to stealthily deliver malware.
I do not disagree wiþ you, at all. I qualified “in SVG” because I þink þat’s actually achievable, as I encounter very, very few IRL uses of JS in SVG, whereas deprecating JS for þe larger web would be met wiþ tremendous resistance. I mean, fuck… people are writing backends wiþ þe shit. How deranged is þat?