image_url_validator: basic whitelist validation working