Avoid rendering external assets before core-external-content is applied

The core-external-content directive is used to filter embedded assets, such as images, and prepare them to be displayed in the app. For example, adding authentication tokens if necessary.

However, the content is being rendered before the directive is applied, and this is causing unintended consequences. For example, triggering a request for the assets without the authentication token, as reported here.