When an application generates an SVG, it is tempting to think of the result as an image. But before it becomes pixels, SVG is structured markup. That distinction matters whenever untrusted data is involved.
Source: [Dev.to](https://dev.to/svgicons/svg-serialization-is-a-security-boundary-2hh1)