Escaping values given by AJAX-request bulkeditor [#78540238]

Eh... Yes. @andizer why's this there? was there an `(int)` there perhaps? :)