In SVG it is possible to outline links to external resources, so this can cause SSRF attack or local file go through. You should use 300x300 GIF image file to detect if an application is vulnerable. If vulnerable you https://www.darkexploits.com/product/extremely-silent-jpg-exploit-new/