build js flash message via jQuery to escape html

Bug:
`message = "foo <bla> bar"` results in `foo bar`