[RobotToaster]

To add to this, those external resources aren't limited to images, they can be basically anything, foreignObject allows video.

I'm also wondering if you could (ab)use SMIL mouse events to bypass this approach.