Fixed allowing for execution of arbitrary Javascript in student response.
ORA-256
Merge pull request #2241 from edx/waheed/ora256-reflected-xss-in-ora-submissions-fix

Fixed allowing for execution of arbitrary Javascript in student response