escape menu href attribute