Escape javascript string (fix bug #177)