no need to escape when autoescape is on