If it's static, then you have no more worry than you would with any other javascript file. If it's dynamically generated, just be sure to escape any string del

If it's static, then you have no more worry than you would with any other javascript file. If it's dynamically generated, just be sure to escape any string delimiters in user-supplied data.