4 ms·

Also, never trust user input. File names are user inputs. You can execute XSS attacks via filenames on an unsecured site.