Reject images that are not on the assets domain or a relative path

(Paired with @jamiecobbett on this.)
I agree with @rgarner. A refactor could be done later if we wanted to add a 3rd type of validator.