disallow slashes in file names