switching to cgi_escape