work around for \s escape for users loading over https