protect against non-base64 images