Build strings with jQuery to mitigate XSS

Fixes #77