add image src meta tag to see if that helps with validation/whitelisting