Are you kidding ?? Source means nothing if you can inject code through resources. ever heard about virus authors being ahead of virus scanners?