fix javascript escaping in badges