I know this is a private method, but the name here is wrong. It should be `escape_str()`.