Resource on confirm order page isn't escaped

[muratcakir]

and throws a javascript error when it contains a single inverted comma.

Migrated from CodePlex: Issue #160 from MichaelHerzog, on 11/14/2013 4:07:58 PM