<img src="http://www.example.com/images/jss.jpg" <script>alert(.blah.);</script> ></img>