Escaping attachment URL and filename