They can post links and video links to trusted sites, the only trust level that can post images directly (and not just a link to an image) is trust level 3:
So if less than three, you have to do a link, which the best way is the mentioned ` route above, so you can link something without having you or the person viewing have to mess with it like adding spaces and such.