fix(csp): allow data uris for images
Merge pull request #1466 from mozilla/csp-profile-images

fix(csp): allow data uris for images