Properly escape javascript