No broken HTML for crazy file names

Fix the problem that `js` and `css` methods generate corrupt HTML when you have a file named such as `foobar'>.css`.