twitter/secureheaders — pull request #14 by oreoshake (2013-02-06 00:23:04+00:00)
Title: Append data: to the img-src directive automatically

Since is safe (besides crazy browser exploits) so let's whitelist that by default.