SVG should only be executing in a null origin if it is not blocked by the CSP.