fixed playback toggle icon, sanitized javascript