common: fix insufficient escaping