Widget: Don't let widget name affect `$.ui` prototype & constructor

[mgol]

This is an edge case and it only affects code accepting untrusted input as a widget name, but it's still technically correct to filter these out.