Updating _assets.html.erb to escape description field

We found that if there was a </script> in the description field of an issue (which happens reasonably often when posting code or google analytics info) then the javascript would break and the issue would no longer be rendered correctly. 

Not sure if this is the correct way to fix this, but it seems to work here.