fixed filename sanitization