Removed imgur and YouTube permission, they support CORS