Patches XSS Vulnerability

No more unescaped quoting the params in JS, whoops.
Also emphasizes the faceted browser link since that's really the thing one should be using.