Should file extension also be escaped?