(#1170) Escape startkey/endkey in WebSQL allDocs()

Properly escape the startkey/endkey to avoid SQL injection
vulnerabilities or problems with invalid characters.