add cgi escape method