fix autoescaping in javascript