Canonicalize and confine print image thumbnail paths

Print image thumbnail paths are resolved and must stay inside the allowed folder.