BIMI SVG validator

Checks a logo against BIMI's SVG security and structure requirements - parsed as text only, never rendered or executed.

1 · Input

SVG markup

Pasted content is validated as text only - never rendered, never executed, never injected into this page's DOM.

Why BIMI restricts SVG so heavily

Ordinary SVG can contain JavaScript, load external resources, and embed raster images - all things a logo displayed automatically inside an email client must never be able to do. BIMI requires a constrained profile (commonly called SVG Tiny Portable/Secure) that strips out everything with a security or unpredictable-rendering implication, leaving pure, static vector shapes.

What is checked

Valid, well-formed XML
A square viewBox
A <title> element
No <script> elements
No event-handler attributes (onload, onclick, and so on)
No embedded raster images
No external resource references
No SMIL animation elements
File size within the common BIMI limit

How this is checked safely

The markup is parsed as text on the server with DTD processing and external entity resolution both disabled - it is never rendered, executed, or inserted into this page. Nothing you paste is retained after the response.