quote filename e.g. in case it contains spaces

Without this, it gives a template error.

Sorry for no test, in the middle of fixing a web-server.