Clear up the usage of _.escape if necessary

https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/16182#note_57890734

When @mikegreiling was working on this particular MR, there's one thing left to discuss, that's the use of _.escape.

currently on that bit of code we call of twice as to avoid security concerns, but I was hoping to only use this call once.