[JimDabell]

You can use CSP for this:

    Content-Security-Policy: img-src 'self';