Fix: shellquote src path

pipenv/core.py

@@ -1344,7 +1344,7 @@ def pip_install(
 
         # Don't specify a source directory when using --system.
         if not allow_global and ('PIP_SRC' not in os.environ):
-            src = '--src {0}'.format(project.virtualenv_src_location)
+            src = '--src {0}'.format(shellquote(project.virtualenv_src_location))
         else:
             src = ''
     else:
@@ -2304,4 +2304,4 @@ def do_update(ctx, install, dev=False, three=None, python=None, dry_run=False, b
                     crayons.green(package_name),
                     crayons.normal('Pipfile', bold=True)
                 )
-            )
+            )