Add a JS function to escape HTML