Fixed XSS Ability for song and playlist player

Added missing htmlentities in javascript for song and playlist player