Hacker News Reader

Can I upload such image for instance to facebook and intent to run it as html (with some JS inside)?

They usually set the content type to that of an image so the browser won't execute the JS.

They've messed this up in the past, see this legendary bug bounty report [1]