WS-2017-0116

The use element can reference external svg's same origin and can include xlink javascript urls or foreign object that can execute xss...