whitelist all allowed characters in filenames, see #75