check that values are getting safely escaped