https://griddle-reviews.blogspot.com/2024/04/why-is-src-attribute-allowed-to-link-to.html