Escape user-supplied JavaScript. Fixes http://lists.openstreetmap.org/pipermail/talk...