rustdoc: escape shown input to prevent injection
auto merge of #13895 : adrientetar/rust/js-escape, r=alexcrichton

See #13884 for the details. Closes #13884.

r? @alexcrichton