Blocked data: URIs as they could allow all sorts of weird XSS (especially on Firefox)