spree/spree — pull request #2289 by imme5150 (2012-12-06 09:04:05+00:00)
Title: escape javascript in ecommerce tracking code

Any field that could possibly have a quote in it should be javascript escaped to avoid injection or breaking the JS.