Only allow image extensions