Issue #1: Added server-side check, replaces ImageTools::blacklisted()