check size of potential response to prevent false image downloads