Allow avatar URLs pointing to Microsoft Graph endpoints such as <code>https://graph.microsoft.com/v1.0/me/photo/$value</code>.
<p>
By default this option is disabled because those URLs often require an Authorization header and may render as broken images in browsers.
</p>