Setting event-handler attributes is blocked, found <$1 $2="$3"> in the uploaded SVG file.