escape '<' and '>'