name_values['s'] = i.screen->name;
name_values['i'] = i.kdm.id ();
- string const name = name_format.get(name_values, ".xml");
+ string const name = careful_string_filter(name_format.get(name_values, ".xml"));
if (zip_add (zip, name.c_str(), source) == -1) {
throw runtime_error ("failed to add KDM to ZIP archive");
}