JavaScript code hidden into PNG image