Update underscore.js to 1.4.4
Use underscore.js methods for HTML (un)escaping