Aggressive output escaping for anti-XSS protection in JavaScript