Add image_url attr to whitelist