Escape request parameters, fix #1923