fileName field mentions catching unsafe file names