Escape and sanitize

@chrisscott  #2 and #3