As recently discovered, we allow invalid filenames to attempt being saved, with no warning to the user that it is invalid. Either we should strip these strings of the invalid characters, or have some kind of frontend and backend validation for it, or both