escape text of grid columns to prevent XSS