Don't let user input be used to create file paths.