allow external resources in "url(//example.com)"