after #7805, gravatar external lookups are not allowed, and the following is observed in the logs:

Refused to load the image 'http://secure.gravatar.com/avatar/7dcac275cbd245fbf96a9a6d8739b880?d=mm&s=30' because it violates the following Content Security Policy directive: "img-src 'self' data:".