added escape Javascript again to prevent execution of javascript code