This is incomplete, and a WIP.
m("svg", { xmlns: "http://www.w3.org/2000/svg", viewBox: "0 0 48 48", width: "24", height: "24", fill: "none", stroke: "black", "stroke-linecap": "round", "stroke-linejoin": "round", "stroke-width": "3",}, [
m("rect", { x: "18", y: "20", width: "20", height: "24",}),
m("script", "alert(\"oh dear!\")")
])