Properly escape string