escape id, name, and iconPath values