UploadFile.ashx no longer allows unsafe filenames (Resolves #492, use ?w=1 to view diff)