escape <> characters