Remove reduntant checks for hooks

Admin checks are unnecessary for `admin_enqueue_scripts` and
`wp_enqueue_scripts` because those hooks only fire on the
back and front-end respectively
Escape data before printing HTML
Properly escape javascript
Merge pull request #24 from Automattic/upstream

Merge changes back to upstream