don't javascript escape()