seperated escape chars for query string from value sanitization