add CDATA comments around inline JS, to avoid validator errors