escape whitespace and hashes in file URIs
allow checksum designation in media load