http://davidwalsh.name/javascript-replace