It is not the comma operator, but a simple arguments list of the call to .replace
- notice the parenthesis.
Your deobfuscator better should've indented it like this:
return a.replace(/[^\w\s\.\|`]/g, function(b) {
return "\\" + b;
});
Btw, that function could be replaced by the simple string "\\$&"
.