Sony sanitize bootstrap data

Does an escape/unescape around the bootstrapping process to prevent XSS.
Why the different in the keys and variable names?