Alter how javascript parameters are created, from:
   String params = "'" + clientId + "'," +
   JSONBuilder.create().
   beginMap().
       entry("menu", clientId+"_buttonselect").
   endMap().toString()
   + "," +
   JSONBuilder.create().
   beginMap().
       entry("ariaEnabled", EnvUtils.isAriaEnabled(facesContext)).
   endMap().toString();
   String finalScript = "ice.component.menubutton.updateProperties(" + params + ");";

 to something like:

   String finalScript = JSONBuilder.create().
   beginFunction("ice.component.menubutton.updateProperties").
   entry(clientId).
   beginMap().
       entry("menu", clientId+"_buttonselect").
   endMap().
   comma().
   beginMap().
       entry("ariaEnabled", EnvUtils.isAriaEnabled(facesContext)).
   endMap().
   endFunction().semicolon().toString();


There will be less intermediary Object creation, the code will be cleaner, and any other parameters to the function will be properly escaped. Have to add the appropriate beginFunction(-) / endFunction(-) methods, and test the implementation on a component renderer.