Ah, thanks! That why these external ressources are shown but not blocked. Interesting attack vector!