iterate over objects only
escape tags