<img src> attribute is now removed instead of setting it to empty string
load external media only if set to 'allow' or 'proxy'
function header coments
moved HTMLPurifier code to own file; moved getMediaUrl() function to utils file