Escape JS variables in HTML. Fixes #2