Aren't names already escaped ?

https://github.com/nlegoff/Phraseanet/blob/3b7a9ce7a65efc6852582620ba517097eee0eefd/lib/classes/set/export.class.php#L779