updates to user escape_javascript instead of privat method