Protection against XSS, using JQuery text() escape, fixes #31

closed grevory/bootstrap-file-input#31