added CDATA around javascript

Signed-off-by: Peter Palfrader <peter@palfrader.org>