header_escaping lockdown