SECURITY: Don't allow embedded application/xml in SVG's