use validator.escape