protect against forged image and album names