Avoid XSS with JavaScript value interpolation
