security patch in manipulation route
allowing space in manipulation route filenames