stricter regexp for escaping