Sony sanitize bootstrap data

Does an escape/unescape around the bootstrapping process to prevent XSS.
for the first part probably not.  For the second yes; modelOrCollection in seen actually is looking for a property on an object, while seen is an array.  So either we use the ugly indexOf checking for -1 or we can use the nice _.contains which will use that under the covers.