SECURITY: Ensure only image uploads can be inlined ยท discourse/discourse@adfa793

This prevents malicious files (for example special crafted XMLs) to be used in XSS attacks.