fixed autoescape