escape in right place,  use character escapes, css only once