Properly escape strings