verify file packager paths do not contain invalid characters; fixes #2649