Allows known-to-be-safe media types in data URIs. Part of #8511.
This should help developers to figure out what's going on when the sanitizer strips some input. Fixes #8522.