Using the "set" tag to add a remote/data/script target to any attribute is blocked. Found <set to="$1"> in the uploaded SVG file.
<set to="$1">
Please enable JavaScript to pass antispam protection!Here are the instructions how to enable JavaScript in your web browser http://www.enable-javascript.com.Antispam by CleanTalk.