escape all control characters listed on json.org