Fix XSS

Now we escape < and > when embedding JSON data into a <script> tag.
release 0.6.3