zuul: Fix insecure content warnings, amp, img[title]

Follow-up a16526a.

Change-Id: I1e43b1cbd624ebac9bb9afdc2bcda68f04d271f0