better sanitization of file paths