[CWE-94] fix improper escaping of creating config file