Reject images that are not on the assets domain or a relative path

(Paired with @jamiecobbett on this.)