also escape <>