Hey,
If I'm using a client-side '<img>' tag whose 'src' value is an external link inputted by the user, are there any security concerns? The user inputs a url to an image and the url is saved in my database. At runtime, when the page is requested, the img tag dynamically loads the url the user has inputted. What security aspects should I be concerned about? How can I make sure that the link is to a JPG/GIF/PNG file and not something like "dangerousfile.aspx/dummy.jpg"?
Thanks
...
Go to the complete details ...