This shouldn't be valid:
http://play.golang.org/p/IQ8GeEmP1_
t, params, err := mime.ParseMediaType(`image/'><style type="text/css">td{background-color:red}</style>`)
fmt.Printf("t=%q, p=%v, err=%v", t, params, err)
t="image/'><style type=\"text/css\">td{background-color:red}</style>", p=map[], err=mime: unexpected content after media subtype
according to: http://www.ietf.org/rfc/rfc1521.txt