picture url should not be escaped