Skip filename suffix check for embedded images; return blocked.gif instead of HTML warning when embedded (#1489029)