escape # and &