yeah, simple `basename()` would be enough to avoid path traversing i think, right?