re-enable sanitizing of data: URLs and also sanitize intrinsics on non-HTML pages where CSP doesn't work
re-enable sanitizing of data: URLs and also sanitize intrinsics on non-HTML pages where CSP doesn't work