fix broken js_escape_html #1046
compatibale with 1.8.7
Merge pull request #1051 from hooopo/safebuffer-gsub

fix broken js_escape_html #1046
Merge remote-tracking branch 'upstream/master' into super-admin