I'm having an issue with a javascript call to an api function in NetSuite that returns a string with quotes in it. An error is thrown each time the call is made.

```
var selling_point_1 = "<%=getCurrentAttribute('item','custitemsellingpoint1')%>";

```

when looking in the debugger, this evaluates to:

```
var selling_point_1 = "Product Dimensions: H:14" W:24"";

```

Any string function (like .length or charAt(0) ) on this also throws an error. I have no control over what the function call returns, so i need to know how to handle embedded quotes. 

Any help would be greatly appreciated, John