even if this worked jeffalo’s dompurify would cut the invalid src and possibly the onerror @jeffalo pls confirm