Calling a function 'import' is a really stupid idea...
Allow img tag based on permissions.