split out attr/css/js escaping