[SECURITY] XSS injection possibility

[yois615]

At this line:
https://github.com/yois615/OS-Image-Filter/blob/master/src/js/background.js#L143

We fetch an arbitrary URL. This needs to be better thought out.
https://developer.chrome.com/docs/extensions/mv3/network-requests/#xhr-vs-content-scripts

[yois615]

https://stackoverflow.com/questions/22165414/access-to-image-and-video-data-from-browser-extension-vs-cors