escape for tomcat