only escapes plain values, not formatted values