Fixed vulnerability caused by bad escaping