escaping stuff on the client for now, will move to server