fix XSS vulnerability

updated to jsontree 0.1.7

closes #75