🐛 Bug Report: GIF blocked by CSP

[climbTheStairs]

Describe the bug

GIFs in comments are blocked the page's Content Security Policy, and a broken image is shown in its place.

Steps to reproduce the bug

1. Go to https://libreddit.domain.glass/r/linuxmemes/comments/rox3y0/comment/hq2h87f/ (example)

The GIF embedded in the highlighted comment is not loaded.

Error in (Firefox) console:

Content-Security-Policy: The page’s settings blocked the loading of a resource at https://www.redditstatic.com/marketplace-assets/v1/core/emotes/snoomoji_emotes/free_emotes_pack/shrug.gif (“img-src”).

What's the expected behavior?

One of the following:

• The GIF is proxied through libreddit
• An error message that this feature is unsupported is shown instead of only a broken image
• The request is allowed by the CSP and the GIF is shown as is (not private)

Additional context

• GIFs on comments #216 may be related, but it is already completed
• Emoji from Reddit doesn't appear correctly. #336 may be related, but the GIF is loaded from an external domain rather than redditstatic.com