mini security audit, dont even attempt to generate thumbnails for files with certain known-not-image-and-could-do-weird-things extensions; prevents continuous 500ms hang on directories with these common text/script files inside