[SECURITY] Ensure validity of parameters submitted to ThumbnailController