http://cross-site-scripting.blogspot.com.br/2009/05/javascript-encoder.html