better output encoding protections