[BUGFIX] Missing addslashes for potential JS link content