Added extensible whitelist to set allowed domain sources for embedded images and individual attributions for each domain