allowing data uri's