Fixed img tags are allowed without filtering of their attributes.
ORA-255
Merge pull request #164 from edx/waheed/ora255-stored-xss-in-ora-feedback-fix

Fixed img tags are allowed without filtering of their attributes.