Realistically if you want to contain anything but short text or heavily compressed data URIs you need to be hosting it on a domain the code points to.