I suppose, strictly speaking, but the user didn't pass the filename. The request was made by our own code and should have followed an operation that stored a file in the session, so I maintain it's a server problem.