Attending the DNN World conference I heard that using a .aspx in ones module can create a security issue. If that is true I'll need to look over a module I recently made where I used a .aspx to display an image within a jquery of the View.ascx.

Confirmation to that security issue and alternatives to my approach for displaying the image would be appreciated.

Well, I'm using the ASPX as a way to display binary images from the database. I have a div and set the background-image equal to that ASPX and pass a key into the query string and then ASPX retrieves the binary image from a database, re-sizes it, then writes it to memory.

I don't know if that is potentially dangerous or not.