I haven't tested this yet, but I suspect the server will produce a 500 error or otherwise not do the right thing when given invalid file names during upload. I probably want to add some escaping/normalization to avoid this, or maybe just give a relevant error message.