/{thumbs,preview}/jsc3d/ now takes the PK of an object that exits in our DB, instead of a path. This is becouse apache collapes double slashes. So "//" becomes "/". "http://" becomes "http:/" and breaks everything.

It was also a potential XSS attack vector, so it had to be changes eventually.

https://groups.google.com/forum/#!topic/django-users/31oV1WhuAZ4