Test fixes
User input HTML safe, thumbnail always jpeg