Sanitize filenames before using in Content-Disposition header