escape < and > characters