escape domain client-side