Fix xss, based on http://jfire.io/blog/2012/04/30/how-to-securely-bootstrap-json-in-a-rails-view/