process js escaping on DOM handlers