Tracker SelectRefs() doesn't escape file names

[humdinger]

This is hrev52888.

You can script Tracker to select a file in a window by sending it a BMessage 'Tsel' with the ref of the file. If that file name contains forbidden characters, like '+[\', Tracker pops up an alert about an "Error in regular expression: 'Nested *?+.'"

This is seen in QuickLaunch, see Diver's ​ticket #30 about it.

I suppose, one has to CharacterEscape() at ​Tracker.cpp#n728, but I can't seem to make it work...