Prevent XSS attacks. Tests: XSS attack.
For performance reason do not parse data if it does not contain img tag and data attribute.
Refactor readOnly method and tests.
Added `hidden` parameter to `isReadOnly` method.
uploadimage paste use img.isReadOnly instead of inEditableBlock.
Added loadingType property to UploadWidget.