File‑System Path Safety

[Emperor42]

writeFormFile constructs file paths with filepath.Join(storageDir, base+".html") but does not sanitize base. Although base is generated internally, future changes could allow user‑controlled values, leading to directory traversal.