Escape some javascript 

Really all of those fields should probably be 
escaped