allow data protocol

data protocol can be used like <img src="data:image/png;base64,SOME_BASE64_PNG">

so allowing data protocol