escape js when inserting entry