HTTPUploadedFile: better filename sanitization