I also had no idea you could include a background-image from a STYLE block.

This immediately tingled url() and SVG and XML resource tracking fears in me, but an hour of AI testing later and it seems that the browser vendors have properly closed off these holes at all levels. pfew.