string converter / escaper for the web