I've now fixed this up. We now make a robust check as to whether the digest in the filename is one we know about.