img-src
media-src
Content-Security-Policy
* add img-src and media-src to csp in file and media proxy * add csp changes to changelog * sort and remove trailing semicolon
Resolve #7779