Home Assistant changes how it serves locally stored SVG images when someone opens a file’s own address. The browser downloads the file instead of opening it as an active document, preventing embedded scripts from running on the same site as the Home Assistant interface.
Franck Nijhof preserves SVGs used as ordinary images in picture cards and thumbnails. Media folders can receive files from installed apps, snapshot actions, downloads and automations as well as uploads; the safeguard applies when directly opening an SVG from those folders.