Whitelist rather than blacklist filename characters
also allow numbers