add escaping for path()

Signed-off-by: Mattias Andrée <maandree@operamail.com>