bug fix -- htmlspecialchars in thumbnail markup