Content-Security-Policy: img-src 'self'

This will try to load local image.
Edument logo
(You should see Edument logo)

This will try to load remote image.
Google logo
(You shouldn't see Google logo, as remote images are forbidden)