generated filename is never checked for directory traversal sequences, then the
crossover point could be where the filename is constructed (although it could be checked
after construction), or just before a file operation (e.g., delete) is performed on the
supplied filename.