bugfixes:
- html escaping bug
- "element size" instead of "word size" (abuse of the terminology of "word")
- added missing validation for MemberExpression property name subexpression
- added missing enforcement of integer literal in MemberExpression shift