JS - HTML escape symbols