fix(notifications): check every img src and uncache previewHEADmaster

The sanitizer matched the first \bsrc anywhere in the tag, so a
data-src="file:///tmp/decoy" before a remote src won the match and kept
the whole tag while Qt, which ignores data-src, fetched the remote
image. Scan every src assignment in the tag and keep it only if all of
them are local. Also set cache: false on the balloon preview, since the
daemon overwrites the same path on a replace and QQuickPixmapCache keys
on URL, so a replaced notification could show the previous image.

1 files changed, 1 insertions, 0 deletions

diff --git a/notifications/NotificationBalloon.qml b/notifications/NotificationBalloon.qml
index bfccda3..49ec0b4 100644
--- a/notifications/NotificationBalloon.qml
+++ b/notifications/NotificationBalloon.qml
@@ -155,5 +155,6 @@ Rectangle {
         source: visible ? "file://" + b.notification.image : ""
         fillMode: Image.PreserveAspectFit
         asynchronous: true
+        cache: false
     }
 }