SVG also supports <script> tags, which is even wilder