fix XSS in labels
add semicollon
add test of plugins/legend.js
add test of plugins/legend.js