new autoescaping by default