form will display broken images, but we should make it not even accept non-images