Fixed HTML escaping for echoing JS into the page