`Content-Disposition` decides a filename, and the filename is where a download becomes a write

How Content-Disposition filenames reach the filesystem, why a missing disposition is also a bug, and the controls that hold.