Sanitise filenames that contain `*` or `?`

[RichardSlater]

I found that on Windows certainly, the existence of a * in the URI on Medium.com would cause image imports to fail. For good measure I also replace ? with a _ as that would also cause the same issue if URIs gained query strings.