added tests
enabled escaping quotes by cgi.escape