Or perhaps `CGI.escape`