Allows inline images in content security policy