#197 - Properly sanitize filenames for uploads