LPS-42950 email variable comes from a param so it should be escaped