It would be a better abstraction to sanitize the filename in `store.save_file_submission` (that way you don't have to remember to sanitize if you use it elsewhere).