escape message to prevent potential security problems