title: Possible to Hide Script inside Base64 Image
body: <p>I know it's possible to encode images as base64 strings and render those images in html but I'm wondering if it's possible to do this with raw base64 string. The source of my base64 string isn't trusted, so I'm wondering if it's possible for this to be exploited as an entry for a cross site scripting attack.</p>