SONAR-55 Fix wrong y metric. Escape javascript injections.