#13 escape string for JS