proper code excaping