You shouldn't let me add arbitrary strings to the `Content-Disposition` header; I'm not sure if this lets me do anything nasty, but it does let me cause an error by accident if the title of my notebook is something strange.