||accounts.google.com^$image,third-party
    ||google.com/accounts/*$image,third-party

For those that want to prevent the attack with ublocko, without filtering all 3rd party requests