Mitigate XSS via EXIF