escapeForHtmlInJs