@dill - Have you ever coded a web app where multiple users were going to perform operations like uploads and downloads and have to create temp folders and "pretty-named files" for download on the server?

btw - google around for NODE and security and it's no bogeyman.