escape quotes in value param of input tag