You can't really do much else other than judging by the extension.

The best you could probably do is remove all illegal characters from it and just serve it as text.