better string injection to prevent encoding issues