hm, you have a point here i think. guess i will escape quotes and brackets. we could also go and encode all non-letter characters in case somebody is using unfriendly hash values as ids.