title: Image script injection
body: <p>Hey I am trying to defend my application from injecting javascripts inside images.
  I am curious how does the browser appends images to the page so the script can be executed?I dont see how it can be done inside </p>
  
  <pre><code>&lt;a href="image.png&gt;&lt;/a&gt;
  </code></pre>
  
  <p>??</p>