Escape the input, not the output