Update for 2021 (most answers are from 2015 and earlier.)
Quotes are optional, however some characters (if used) will need to be escaped.
From MDN:
A URL, which is a relative or absolute address, or pointer, to the web resource to be included, or a data URI, optionally in single or double quotes. Quotes are required if the URL includes parentheses, whitespace, or quotes, unless these characters are escaped, or if the address includes control characters above 0x7e. Double quotes cannot occur inside double quotes and single quotes cannot occur inside single quotes unless escaped. The following are all valid and equivalent:
<css_property>: url("https://example.com/image.png")
<css_property>: url('https://example.com/image.png')
<css_property>: url(https://example.com/image.png)
If you choose to write the URL without quotes, use a backslash () before any parentheses, whitespace characters, single quotes ('
) and double quotes ("
) that are part of the URL.
Source:
https://developer.mozilla.org/en-US/docs/Web/CSS/url()