escape square brackets in regex