fix($compile): Allow blob urls in images

Urls created using URL.createObjectURL were previously blocked
and marked as unsafe