ui fix
escape function to javascript, not html