Fixes a typo and squashes an XSS vulnerability

This two line change pull request fixes a small typo with one of the methods (alueObserver becomes valueObserver) and fixes an potential XSS vulnerability by using by using Handlebars to escape any output.