# ASSET_SVG_UNSAFE: SVG with active content

> SVG with active content

| Severity | Fault                         | Stage        |
| -------- | ----------------------------- | ------------ |
| error    | customer (the source package) | build output |

## What it means

An SVG the component imports has something that runs code or loads another URL: a <script>, an on… event handler, <foreignObject>, a link (<a>), an animation that changes a link or a handler, a reference to another file or URL (href, xlink:href, url(…), @import, xml-stylesheet), an embedded SVG or anything other than a raster data: image. SVG assets are published on the CDN, where a browser can open them as a page, so the build refuses them instead of rewriting them. Comments, metadata and editor data (Inkscape, Illustrator) are removed, not refused.

## How to fix

Remove what the message names: an icon or illustration needs no script, handler or external file. Point href and url() at an id of the same SVG (#gradient), embed raster images as data:image/png;base64, and do interactivity in the component's code instead of the SVG.