diff --git a/src/web/web.py b/src/web/web.py
index 9c617eaa..78bc57e2 100644
--- a/src/web/web.py
+++ b/src/web/web.py
@@ -510,6 +510,9 @@ def create_file():
     size = (int(request.form.get("size")) * 1024 * 1024)
     file_type = request.form.get("type")
 
+    from werkzeug.utils import secure_filename
+    file_name = secure_filename(file_name)
+
     process = create_new_image(file_name, file_type, size)
     if process["status"] == True:
         flash(f"Drive image created as {file_name}.{file_type}")