- Minor fixes.

src/Plugin/Filter/BlazyFilter.php

@@ -241,6 +241,9 @@ class BlazyFilter {
 
     // Checks if we have a valid file entity, not hard-coded image URL.
     if ($src = $node->getAttribute('src')) {
+      // Iframe with data: scheme is a serious kidding, strip it earlier.
+      $src = drupal_strip_dangerous_protocols($src);
+
       // If starts with 2 slashes, it is always external.
       if (strpos($src, '//') === 0) {
         // We need to query stored SRC, https is enforced.
@@ -251,9 +254,6 @@ class BlazyFilter {
         $settings['uri'] = $settings['image_url'] = $src;
       }
       elseif ($node->tagName == 'iframe') {
-        // Iframe with data: scheme is a serious kidding, strip it earlier.
-        $src = drupal_strip_dangerous_protocols($src);
-
         $settings['input_url'] = $src;
         $settings['uri'] = $settings['image_url'] = $this->getVideoThumbnail($src);
         $settings['scheme'] = $this->getHost($src);