picture ns

xss in srcset of picture