stripImages method vulnerability