Guard against ing elements with no src attribute
Add sanitization spec