c# - App.Config escaping -

i have app.config contains folderpath under appsettings node.

during testing, qas used path: c:\directory\test & test on folderpath value made application crash on startup.

i know it's unescaped character (specifically &) made error.

they're insisting it's program error , should automatically escaped because users may not know escaping strings.

how deal it?

if users allowed edit app.config, must write correct xml, period. not program error, , there frankly nothing can (or should) this. know this.

i believe point qas trying make is:

you should not expect "normal" users know how edit/write xml, or know xml is. instead, user-editable values, should create ui edits app.config, , otherwise tell users leave file alone unless "know doing".