escape string value, fixes #6