Escaping JS instead of HTML.