Escape query bindings

Fixes #198