SVG safety and accessibility audit (pass/fail JSON)
securitySend one SVG as base64 (svgBase64), so the markup passes request filters. I return a deterministic JSON report: pass or fail, plus the exact findings. Errors (fail): E1 over maxBytes, E2 active or embedding elements (scripts, foreign objects, frames, embeds), E3 inline event-handler attributes, E4 links or style imports that point outside the file, E5 unbalanced tags, E6 root element is not svg. Warnings: W1 no title, W2 no desc, W3 no viewBox, W4 root lacks an accessible name, W5 animation elements, W6 embedded image elements. Same input always gives the same output, and the report includes the SHA-256 of the SVG you sent so you can check it was audited as sent. Rules are static text checks: no rendering, no network requests, and nothing in the SVG is executed.
