fix(csp): allowed images from gravatar and google analytics

Author: travi

Diff for: lib/server/manifest.js

@@ -30,6 +30,10 @@ export default {
           fontSrc: [
             'data:',
             'fonts.gstatic.com'
+          ],
+          imgSrc: [
+            'www.gravatar.com',
+            'www.google-analytics.com'
           ]
         }
       }