protect against windows filenames again