fix cgi escape