Option in global settings or role editor to allow SVG upload

This request seems to be related. Using SVGs as icons - #5 by dranzer

Your current approach seems unsafe. There is no sanitisation.