escape json in script tag