Escape the [] symbols internally

Those are big security risks, as they are often parsed as dynamically as
<> are.