escape all strings