This vector demonstrates how to test external URLs using the new URL fuzzing placeholders. It enumerates every SVG tag & attribute and logs if a request was made.
<svg><$[data1] $[data2]="https://fuzz.shazzer.co.uk/$[rand]?$[data1]->$[data2]" /><svg><feImage->href ="https://fuzz.shazzer.co.uk/8wjv0hpma7b?feImage->href->" /><svg><feImage->xlink:href ="https://fuzz.shazzer.co.uk/r0v1a5h16gk?feImage->xlink:href->" /><svg><image->href ="https://fuzz.shazzer.co.uk/oekhakwh8o?image->href->" /><svg><image->xlink:href ="https://fuzz.shazzer.co.uk/z7h6fc9dwl?image->xlink:href->" /><svg><script->href ="https://fuzz.shazzer.co.uk/hil5zcwgzsm?script->href->" /><svg><script->xlink:href ="https://fuzz.shazzer.co.uk/wnl22lz4gr?script->xlink:href->" /><svg><VECTOR_ERROR ="https://fuzz.shazzer.co.uk/zpskka22ksc?VECTOR_ERROR->" /><svg><feImage->href ="https://fuzz.shazzer.co.uk/xscl5h6u3b9?feImage->href->" /><svg><feImage->xlink:href ="https://fuzz.shazzer.co.uk/ta6g3h5bi28?feImage->xlink:href->" /><svg><font-face-uri->href ="https://fuzz.shazzer.co.uk/704f5cyad57?font-face-uri->href->" /><svg><font-face-uri->xlink:href ="https://fuzz.shazzer.co.uk/kbut9h26olh?font-face-uri->xlink:href->" /><svg><image->href ="https://fuzz.shazzer.co.uk/njr86zt7yh?image->href->" /><svg><image->xlink:href ="https://fuzz.shazzer.co.uk/tr72z6ga15?image->xlink:href->" /><svg><script->href ="https://fuzz.shazzer.co.uk/jh5n3kvt8g?script->href->" /><svg><script->xlink:href ="https://fuzz.shazzer.co.uk/ce5sd7ey6wm?script->xlink:href->" /><svg><feImage->href ="https://fuzz.shazzer.co.uk/cvtxi3ky8ll?feImage->href->" /><svg><feImage->xlink:href ="https://fuzz.shazzer.co.uk/dx84bx9fuj?feImage->xlink:href->" /><svg><image->href ="https://fuzz.shazzer.co.uk/ejx5pdyfqb6?image->href->" /><svg><image->xlink:href ="https://fuzz.shazzer.co.uk/z3gw8wljfss?image->xlink:href->" /><svg><script->href ="https://fuzz.shazzer.co.uk/pq92rdfou1?script->href->" />