fix(bpmn): escape forbidden character