autoescape when pasting into string literals