escape id, name, and iconPath values
Merge pull request #532 from mykmelez/escape-vals

escape id, name, and iconPath values