Escape % characters in the walker's output

Since the output of the walker is passed to sprintf() having several % characters in the string results in a fatal error.

You can test it with %s%s%s%s as the item title/url.