http security: fixed scheme for img-src, media-src
in dev mode ( http
protocol) images via proxy don't loads
Refused to load the image '<URL>' because it violates the following Content Security Policy directive: "img-src 'self' data: blob: https:".