path escaping challenge...