allow escape of < and >