Escape service name in li element

See

Line 102 in 2b9474e

    
           $('.tosdr-points').append($('<li>', { id: `popup-point-${service.name}-${p.id}`, class: 'point' }));

- although service.name and p.id come from our database, let's keep them unescaped in the database, and then escape those strings here.

Thanks to Xena from Firefox extension review for reporting this!