escape request body fields