Merge "thumb.php: Set ENT_NOQUOTES for htmlspecialchars"