My initial thought would be that this could be a security risk. Glad too see that you’re right – it won’t work as an img tag.