Reject images that are not on the assets domain or a relative path

(Paired with @jamiecobbett on this.)
could we group the 3 new specs in a "context" block with a label relating to images?