Is this javascript vulnerable for XSS?

[Henna]

I´m woundering if this code is vulnerable for XSS attacks?

Javascript function:

function viewImage(i) {
	img = document.getElementById("largesize");
	img.src = i.src;
}

and the call to the function in the code:

<img src="photos/image1.jpg" onclick="viewImage(this)">
<img src="photos/image2.jpg" onclick="viewImage(this)">

etc

Is it somehow possible to call the function with other values than the one in the code and enter malicious code?

Is it safer or unsafer to call the function like this instead?

<a href="javascript:viewImage('photos/image1.jpg');"><img src="photos/image1.jpg"></a>

The image is showed here after the call:

<img src="photos/image1.jpg" id="largesize">

[ReFreezed]

It's all safe. And I would use the first method, not because it's safer or unsafer, but simply because you don't have to write the image url two times. And also, it's less code.

[rnd me]

javascript doesn't have any XSS vulnerabilities, CMSs and comment systems do...