Not only does it carry the complete code but both image and the Javascript ... What if you are working on a computer that doesn’t allow the browser to load Javascript. You may be able to embed ...

The authors turned to polyglot images to add the JavaScript ... characters 'BM' that mark the file type for the computer and turn them into a JavaScript variable, set to the payload.