Latte: security fix for escaping inside <script>, prevents "Script data escape start state"

http://www.whatwg.org/specs/web-apps/current-work/multipage/tokenization.html#script-data-escape-start-state