#12 Allow HTML img from https URLs in user text