/ and \ are not escaped in `uri_encode` (https://github.com/rapid7/metasploit-framework/blob/master/lib/rex/text.rb#L729) so filenames should be tested separately