The only thing I am nervous about here is should we `split("\\").join("\\\\")` the inputs? Since these are user provided, I dont' want to make it insecure.