External image vulnerabilities
===

What security holes can appear on my site by including external images via _img_ tag and how to avoid them ? I'm currently only checking the extension and mime-type of image on submission (that can be changed after URL is submitted) and URL is sanitized before putting it in _src_ attribute.