Sanitize filenames (in a unified manner) before using in Content-Disposition header