This assumes that the url is a sanitized image. So the docs should mention this.