Shouldn't the first call be escapejs too? The value is inserted in JavaScript.