Hotfix/quote more characters in javascript variables.

Quote more characters in javascript variables which are filled with user provided information.  This follows OWASP recommendations