Disclosure of files via logo_path query parameter

Require version that checks mime type...