#182 escaping for user input