escape square brackets