true flag on cgi.escape()