escape flash strings instead of an array