Er... It can send back a img tag and your browser is actually the one retrieving the info (thinking that it retrieved it before sending it to you is highly dubious (especially as it doesn't handle base64 encoding)