Only allow file name for EXPORT intent

Allowing a file name for the IMPORT intent is a security risk

Refs #1784