safe escape variable