Only allow viewing images in content dir